sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Maxdb | Sap | 7.6.0.37 (including) | 7.6.0.37 (including) |
| Maxdb-7.5.00 | Ubuntu | dapper | * |
| Maxdb-7.5.00 | Ubuntu | edgy | * |
| Maxdb-7.5.00 | Ubuntu | feisty | * |
| Maxdb-7.5.00 | Ubuntu | gutsy | * |
| Maxdb-7.5.00 | Ubuntu | upstream | * |