CVE-2003-0943

{"id": "CVE-2003-0943", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2003-12-15T05:00:00.000", "references": [{"url": "http://www.atstake.com/research/advisories/2003/a111703-2.txt", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3) Web Database Manager (webdbm)."}, {"lang": "es", "value": "Web-tools en SAP DB anterior a la 7.4.03.30 instala varios servicios que est\u00e1n habilitados por defecto, lo que podr\u00eda permitir que atacantes remotos obtengan informaci\u00f3n importante o redirijan ataques contra bases de datos internas mediante (1) waecho, (2) interfaz web SQL (websql), o (3) Web Database Manager (webdbm)."}], "lastModified": "2008-09-05T20:35:37.403", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:sap_db:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F09D1B2-0704-427B-BE35-357E9C29E504", "versionEndIncluding": "7.4.03.29"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}