CVE: CVE-2002-1576

Export to Word

lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00281
Percentile: 0.51118

CVSS Scoring

CVSS v2 Score: 7.2

Severity:

Affected Products

← Back to Home