Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP DB RPM安装文件全局可写漏洞
Vulnerability Description
SAP是一个基于客户/服务机结构和开放系统的，集成的企业资源计划系统。 RPM方式安装的SAP DB存在全局可写的二进制程序，本地攻击者可以利用这个漏洞以木马替换可写的二进制程序，导致权限提升等破坏。 如果SAP DB从RPM安装，其中的lserver和dbmsrv二进制程序安装后的权限为全局可写，攻击者可以删除这两个程序对应用系统进行破坏，或者更改，替换程序以进行权限提升攻击。 此漏洞不影响以tgz方式安装的应用系统。
CVSS Information
N/A
Vulnerability Type
N/A