Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP DB权限提升及缓冲区溢出漏洞
Vulnerability Description
SAP是一款开放源代码的数据库服务程序。数据库服务程序快速,高效,易于管理。 SAP的核心SAP DB 7.4.03.27和早期版本存在多个漏洞,攻击者可以利用这些漏洞提升权限或者远程破坏SAPDB服务器,获取未授权访问。
CVSS Information
N/A
Vulnerability Type
N/A