Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2008-0306 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2008-0306

CVE-2008-0306

UNKNOWN

sdbstarter in SAP MaxDB 7

Published Mar 11, 2008

Modified 1 years ago

Details

sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670

http://secunia.com/advisories/29312

http://www.securityfocus.com/bid/28185

http://www.securitytracker.com/id?1019570

http://www.vupen.com/english/advisories/2008/0844/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/41104

https://www.cve.org/CVERecord?id=CVE-2008-0306

CVSS Analysis

CVSS v2.0

6.9

Exploitability

Access Vector

LocalAV:L

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedMar 11, 2008

ModifiedAug 7, 2024