CVE-2002-1578
Last modified
CVE-2002-1578 is a vulnerability of currently unknown severity. The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.. EPSS estimates a 2.66% chance of exploitation in the next 30 days.
Description
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Sap R 3 | All versions |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.htmlExploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4613Exploit, Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.htmlExploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4613Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-1578?
How severe is CVE-2002-1578?
How do I fix CVE-2002-1578?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-1572Signed integer overflow in the bttv_read function in the btt…
- CVE-2002-1573Unspecified vulnerability in the pcilynx ieee1394 firewire d…
- CVE-2002-1574Buffer overflow in the ixj telephony card driver in Linux be…
- CVE-2002-1575cgiemail allows remote attackers to use cgiemail as a spam p…
- CVE-2002-1576lserver in SAP DB 7.3 and earlier uses the current working d…
- CVE-2002-1577SAP R/3 2.0B to 4.6D installs several clients with default u…
- CVE-2002-1579SAP GUI (Sapgui) 4.6D allows remote attackers to cause a den…
- CVE-2002-1580Integer overflow in imapparse.c for Cyrus IMAP server 1.4 an…
- CVE-2002-1581Directory traversal vulnerability in nph-mr.cgi in Mailreade…
- CVE-2002-1582compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using …
- CVE-2002-1583Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Unive…
- CVE-2002-1584Unknown vulnerability in the AUTH_DES authentication for RPC…
Are you affected by CVE-2002-1578?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST