Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP DB本地符号链接漏洞
Vulnerability Description
SAP DB是一款商业性质数据库系统。 由于'lserver'缺少充分完整性检查，当在本地目录中尝试执行'lserversrv'程序时，本地攻击者可以利用这个漏洞通过符号链接提升权限。 SAP DB中的'lserver'程序在执行程序时缺少处理，攻击者可以通过在'lserver'目录中建立符号连接，连接到包含恶意代码的'lserversrv'二进制程序，执行'lserver'时可导致当前目录中的恶意'lserversrv'通过符号链接而被执行，一般以root用户权限执行包含在'lserversrv'中的任
CVSS Information
N/A
Vulnerability Type
N/A