Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

SAP Database SDBINST Race Condition Vulnerability

SAP Database SDBINST has been reported prone to a race condition vulnerability.

It has been reported that the SAP Database install tool SDBINST may perform operations non-atomically when installing the SAP database. This condition may open a window of opportunity for a malicious user to replace one of two SAP Database files with a malicious file, before SBDINST sets the setuid bit on the files.

An attacker may exploit this vulnerability to gain root privileges.







 

Privacy Statement
Copyright 2008, SecurityFocus