CVE-2002-1576: lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv pro...

Security readout for executives and security teams

CVE-2002-1576 is an old local privilege-escalation issue in SAP DB 7.3 and earlier. A user already on the database host may be able to make lserver run an unintended lserversrv program from the current directory. The main business concern is legacy SAP DB systems with local user access. Exposure is likely limited to systems still running SAP DB 7.3 or earlier where untrusted or lower-privileged users have local access to the host. It is not described as a remote network exploit in the provided sources. Treat this as a legacy-system risk. It is urgent where SAP DB 7.3 or earlier remains in production with shared local access, but less urgent where no affected versions exist or hosts are tightly administrator-only. Mitigation focus: Inventory SAP DB deployments and identify versions 7.3 or earlier.; Consult the SAP DB alert or vendor guidance for fixed versions or official workarounds.; Restrict local shell access on database hosts to trusted administrators..

Prepared

Jun 30, 2026, 06:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.