Sapcar Archive Tool
Monthly
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security. Rated medium severity (CVSS 5.8). Public exploit code available and no vendor patch available.
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security. Rated medium severity (CVSS 5.8). Public exploit code available and no vendor patch available.