CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
sapmaxdb
7.6.0.37
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
maxdb-7.5.00
dapper
ignored
edgy
ignored
feisty
ignored
gutsy
ignored
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
Common Weakness Enumeration
References
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669
http://secunia.com/advisories/29312
http://www.securityfocus.com/bid/28183
http://www.securitytracker.com/id?1019571
http://www.vupen.com/english/advisories/2008/0844/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41107
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669
http://secunia.com/advisories/29312
http://www.securityfocus.com/bid/28183
http://www.securitytracker.com/id?1019571
http://www.vupen.com/english/advisories/2008/0844/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41107