PT-2006-4975 · Sap · Sap Internet Graphics Server

Mariano Nunez Di Croce · Publicado 2006-08-14 · Atualizado 2018-10-17 · CVE-2006-4134

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Service (IGS) versions 6.40 and earlier SAP Internet Graphics Service (IGS) versions 7.00 and earlier

Description The issue is related to a design flaw in the SAP Internet Graphics Service, allowing remote attackers to cause a denial of service, specifically a service shutdown, by sending certain HTTP requests.

Recommendations For SAP Internet Graphics Service (IGS) versions 6.40 and earlier, update to a version later than 6.40 to resolve the issue. For SAP Internet Graphics Service (IGS) versions 7.00 and earlier, update to a version later than 7.00 to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-4134

Produtos afetados

Sap Internet Graphics Server

Referências · 10

• http://cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Denial_of_Service.pdf · Nota
• http://securitytracker.com/id?1016675 · Nota
• http://marc.info/?l=bugtraq&m=115524314804055&w=2 · Nota
• http://securityfocus.com/archive/1/442838/100/0/threaded · Nota
• http://securityreason.com/securityalert/1390 · Nota
• http://vupen.com/english/advisories/2006/3267 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4134 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28328 · Nota
• http://securityfocus.com/bid/19469 · Nota
• http://secunia.com/advisories/21448 · Aviso do Fabricante