Unrated severityNVD Advisory· Published Dec 15, 2003· Updated Apr 16, 2026
CVE-2003-0938
CVE-2003-0938
Description
vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.atstake.com/research/advisories/2003/a111703-1.txtnvdExploitPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/13765nvd
News mentions
0No linked articles in our index yet.