Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-0307

EPSS 4.23% · P89
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-0307

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SAP MaxDB vserver组件远程堆溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MaxDB是SAP应用中广泛使用的数据库管理系统。 MaxDB的vserver组件存在符号错误，远程攻击者可能利用此漏洞导致服务器不可用。 接受连接后，vserver进程会将从客户端读取的参数fork为各种结构，在这个过程中信任客户端所发送的值为有效。如果客户端发送了特制的请求的话，就可能触发堆溢出，导致内存破坏。 如果要利用这个漏洞，攻击者必须能在7210端口上与目标主机创建TCP会话，此外还需要知道服务器上活动数据库的名称。由于vserver服务在接受连接后使用fork()系统调用，因此攻击者可以反复
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-0307

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-0307

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-03-11 · 22 CVEs total

CVE-2008-0118Microsoft Office单元格标注解析内存破坏漏洞(MS08-014)
CVE-2008-1284Horde Framework 主题文件包含漏洞
CVE-2008-1283silver-forge neptune_web_server 跨站脚本攻击漏洞
CVE-2004-2759Utilization Suite 和 Performance Suite 安全漏洞
CVE-2008-1288ibm rational_clearquest 信息泄露漏洞
CVE-2008-1287IBM Rational ClearQuest 配置错误漏洞
CVE-2008-1286sun java_web_console 访问权限绕过漏洞
CVE-2008-1285Sun Java Server Faces跨站脚本攻击漏洞
CVE-2008-0306SAP MaxDB sdbstarter环境变量本地权限提升漏洞
CVE-2008-0301Mapbender 'mod_gazetteer_edit.php' SQL注入漏洞
CVE-2008-0300Mapbender 'mapFiler.php' 代码注入漏洞
CVE-2006-4695Microsoft Office Web Components URL分析漏洞
CVE-2008-0117Microsoft Excel多个远程代码执行漏洞
CVE-2008-0116Microsoft Excel富文本值堆溢出漏洞
CVE-2008-0115Microsoft Excel公式解析远程代码执行漏洞
CVE-2008-0114Microsoft Excel多个远程代码执行漏洞
CVE-2008-0113Microsoft Office畸形绘图对象远程代码执行漏洞
CVE-2008-0112Microsoft Excel多个远程代码执行漏洞
CVE-2008-0111Microsoft Excel数据验证记录堆内存破坏漏洞
CVE-2008-0110Microsoft Outlook Mailto URI远程代码执行漏洞

Showing top 20 of 22 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-0307

No comments yet

Leave a comment