CVE-2002-1576: sap sap_db
Vulnerability summary
CVE-2002-1576 is a high (CVSS 7.2) vulnerability in sap sap_db. EPSS estimates a 0.90% chance of exploitation in the next 30 days, higher than 59.3% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 16-03-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.90%
Chance of exploitation in the next 30 days
Percentile
59%
Versus all other CVEs
30-day change
0.00 pp
From 0.90% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
SAP DB 7.3.00 - Symbolic Link
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Sap1 product
- sap_db7.3.00
1 vendor · 1 product