CVE-2006-2547

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-23 · updated 2026-06-16

Description

Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling.

Affected products

Sapdba: all versions

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html
http://secunia.com/advisories/20180
http://securityreason.com/securityalert/941
http://securitytracker.com/id?1016122
http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Local_Privilege_Escalation_in_SAP_sapdba_Command.pdf
http://www.securityfocus.com/archive/1/434534/30/4890/threaded
http://www.securityfocus.com/bid/18028
http://www.vupen.com/english/advisories/2006/1861
https://exchange.xforce.ibmcloud.com/vulnerabilities/26526
http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html
http://secunia.com/advisories/20180
http://securityreason.com/securityalert/941

Get alerted when CVE-2006-2547 or the next vulnerability affects your stack