Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-0306

EPSS 0.05% · P16
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-0306

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SAP MaxDB sdbstarter环境变量本地权限提升漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MaxDB是SAP应用中广泛使用的数据库管理系统。 MaxDB所发布的sdbstarter程序在处理某些环境变量时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 这些环境变量用于指定各种MaxDB组件所使用的配置设置。由于sdbstarter程序使用了这些设置，因此本地攻击者可能以root用户权限执行任意指令。如果要利用这个漏洞，攻击者必须能够执行sdbstarter程序，默认下这要求攻击者为sdba组成员。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-0306

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-0306

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-03-11 · 22 CVEs total

CVE-2008-0118Microsoft Office单元格标注解析内存破坏漏洞(MS08-014)
CVE-2008-1284Horde Framework 主题文件包含漏洞
CVE-2008-1283silver-forge neptune_web_server 跨站脚本攻击漏洞
CVE-2004-2759Utilization Suite 和 Performance Suite 安全漏洞
CVE-2008-1288ibm rational_clearquest 信息泄露漏洞
CVE-2008-1287IBM Rational ClearQuest 配置错误漏洞
CVE-2008-1286sun java_web_console 访问权限绕过漏洞
CVE-2008-1285Sun Java Server Faces跨站脚本攻击漏洞
CVE-2008-0307SAP MaxDB vserver组件远程堆溢出漏洞
CVE-2008-0301Mapbender 'mod_gazetteer_edit.php' SQL注入漏洞
CVE-2008-0300Mapbender 'mapFiler.php' 代码注入漏洞
CVE-2006-4695Microsoft Office Web Components URL分析漏洞
CVE-2008-0117Microsoft Excel多个远程代码执行漏洞
CVE-2008-0116Microsoft Excel富文本值堆溢出漏洞
CVE-2008-0115Microsoft Excel公式解析远程代码执行漏洞
CVE-2008-0114Microsoft Excel多个远程代码执行漏洞
CVE-2008-0113Microsoft Office畸形绘图对象远程代码执行漏洞
CVE-2008-0112Microsoft Excel多个远程代码执行漏洞
CVE-2008-0111Microsoft Excel数据验证记录堆内存破坏漏洞
CVE-2008-0110Microsoft Outlook Mailto URI远程代码执行漏洞

Showing top 20 of 22 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-0306

No comments yet

Leave a comment