CVE-2003-0265: SAP DB

Medium severity, CVSS 6.2. EPSS: 0.9% chance of exploitation in the next 30 days.

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.

Affected products

• SAP SAP DB: version 7.3.29 only; version 7.4.3.7_beta only

Published 2003-05-27. Last modified 2026-06-16.