CVE-2008-0307
published 2008-03-11CVE-2008-0307: Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors…
PriorityP342critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
4.00%
89.3th percentile
Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | maxdb | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669http://secunia.com/advisories/29312http://www.securityfocus.com/bid/28183http://www.securitytracker.com/id?1019571http://www.vupen.com/english/advisories/2008/0844/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41107http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669http://secunia.com/advisories/29312http://www.securityfocus.com/bid/28183http://www.securitytracker.com/id?1019571http://www.vupen.com/english/advisories/2008/0844/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41107
2008-03-11
Published