Vulnerability in N/a
CVE-2008-0244
SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe.
EPSS: 0.898 (99.6th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 28409 (x_refsource_SECUNIA, third-party-advisory)
- 20080109 Pre-auth remote commands execution in SAP MaxDB 7.6.03.07 (mailing-list, x_refsource_BUGTRAQ)
- ADV-2008-0104 (vdb-entry, x_refsource_VUPEN)
- 4877 (exploit, x_refsource_EXPLOIT-DB)
- 1019171 (vdb-entry, x_refsource_SECTRACK)
- aluigi.altervista.org/adv/sapone-adv.txt (x_refsource_MISC)
- 3536 (x_refsource_SREASON, third-party-advisory)
- maxdb-system-command-execution(39573) (vdb-entry, x_refsource_XF)
- 27206 (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2008-0244?
- CVE-2008-0244 is a vulnerability in N/a. Published 2008-01-12.
- Is CVE-2008-0244 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.