SAP DB Privilege Escalation and Buffer Overrun Vulnerabilities

SAP DB Privilege Escalation and Buffer Overrun Vulnerabilities

Multiple vulnerabilities have been reported in SAP DB. The following issues were reported:

A local privilege escalation issue (CAN-2003-0938) exists in SAP DB on Windows platforms that may allow an attacker to load a malicious .DLL, resulting in execution of arbitrary code with elevated privileges.

A buffer overrun (CAN-2003-0939) exists in SAP DB for multiple platforms. The issue is present in the 'niserver' (on Unix-based systems) and 'serv.exe' (on Windows) and may allow for remote attackers to execute code on a vulnerable host, resulting in full system compromise.