← Database

CVE-2003-0938

HIGH CVSS: 7.2 Published: 2003-12-15 Modified: 2026-06-16

Description

vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure.

Affected Platforms

Sap Sap Db

Weakness Type

NVD-CWE-Other

References