CVE-2003-0265 describes a race condition in the SDBINST component of SAP DB versions 7.3.0.29 and earlier. This flaw allows local attackers to gain root privileges by modifying critical files that are temporarily created with world-writable permissions before their setuid bits are initialized. With a CVSS score of 6.2 (high severity), this vulnerability has a local attack vector and high attack complexity, but can lead to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB, and the vulnerability has garnered significant community discussion, indicating potential for exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.3.29CPE matchmatch criteria | cpe:2.3:a:sap:sap_db:7.3.29:*:*:*:*:*:*:* | ||
7.4.3.7_betaCPE matchmatch criteria | cpe:2.3:a:sap:sap_db:7.4.3.7_beta:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:H/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.