CVE-2003-0941

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.atstake.com/research/advisories/2003/a111703-2.txtExploit, Patch, Vendor Advisory
http://www.atstake.com/research/advisories/2003/a111703-2.txtExploit, Patch, Vendor Advisory

Timeline

Published: Dec 15, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-09427.5Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary co CVE-2003-09437.5web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain pot CVE-2003-09447.5Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via CVE-2003-09457.5The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduc CVE-2003-09467.5Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers CVE-2003-09477.2Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.CVE-2003-09487.2Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.CVE-2003-09494.6xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary CVE-2003-09507.5PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet CVE-2003-09517.5Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attacke CVE-2003-09547.2Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.CVE-2003-09554.6OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a p