CVE-2003-0938

published 2003-12-15

CVE-2003-0938: vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current…

high 7.2 CVSS 3.1

AV L AC L Au N C C I C A C

vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap	sap_db	<= 7.4.03.27	—