CyberSec.Space Logo
Back to CVE Browser

CVE-2006-2547

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0670%
EPSS Percentile19.13th
PublishedMay 23, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling.

Affected Platforms (CPE)

📦
Sap

Sapdba

All versions

References & Advisories

🔗 http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html
🔗 http://secunia.com/advisories/20180
🔗 http://securityreason.com/securityalert/941
🔗 http://securitytracker.com/id?1016122
🔗 http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Local_Privilege_Escalation_in_SAP_sapdba_Command.pdf
🔗 http://www.securityfocus.com/archive/1/434534/30/4890/threaded
🔗 http://www.securityfocus.com/bid/18028
🔗 http://www.vupen.com/english/advisories/2006/1861

Related Vulnerabilities

CVE-2006-623510.0

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to ...

CVE-2006-610210.0

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X ser...

CVE-2006-446110.0

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the pr...

CVE-2006-021810.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to...