Home > Vulnerability Database > CVE-2008-0306

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2008-0306

Date: March 11, 2008

sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

Severity Score

7.4

Related Resources (8)

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/41104

Url: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670

Url: http://www.securitytracker.com/id?1019570

Url: http://www.vupen.com/english/advisories/2008/0844/references

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-0306

Url: http://secunia.com/advisories/29312

Url: http://www.securityfocus.com/bid/28185

Url: https://www.mend.io/vulnerability-database/CVE-2008-0306

Severity Score

7.4

CVSS v3.1

Base Score:	7.4
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	6.9
Access Vector (AV):	LOCAL
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us