CVE-2001-0366 — saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying th — CVE Database · The Intelligence Room