CVE-2008-0306

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-11 · updated 2026-06-16

Description

sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

Affected products

SAP MaxDB (liveCache): 7.6.0.37

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670
http://secunia.com/advisories/29312
http://www.securityfocus.com/bid/28185
http://www.securitytracker.com/id?1019570
http://www.vupen.com/english/advisories/2008/0844/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41104
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670
http://secunia.com/advisories/29312
http://www.securityfocus.com/bid/28185
http://www.securitytracker.com/id?1019570
http://www.vupen.com/english/advisories/2008/0844/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41104

Get alerted when CVE-2008-0306 or the next vulnerability affects your stack