CVE-2003-0265

Publication date

2003-05-08 04:00:00

Family

mitre

State

PUBLISHED

Description

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.