Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0265. PoCs published by Larry W. Cashdollar.
AI-analyzed exploit summary This exploit leverages a race condition in SAP Database SDBINST during installation to replace a file with a malicious one before the setuid bit is set, potentially granting root privileges. The script continuously checks for a specific file and replaces it with a malicious binary if found.
Description
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.
Exploits (1)
This exploit leverages a race condition in SAP Database SDBINST during installation to replace a file with a malicious one before the setuid bit is set, potentially granting root privileges. The script continuously checks for a specific file and replaces it with a malicious binary if found.