CVE-2003-0265 Race condition in n/a
Local attackers can gain root privileges by exploiting a race condition in SDBINST that creates world-writable files before setting permissions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-0265?
CVE-2003-0265 is a medium-severity vulnerability in n/a, published on 8 May 2003. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.
Which versions are affected by CVE-2003-0265?
It affects 1 product.
Products include Sap Sap Db.
How do I fix CVE-2003-0265?
No fix has been published for CVE-2003-0265 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-0265 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0265 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-rx3q-2fm4-m96h.