PT-2014-1950 · Sap · Sap Afaria

Vahagn Vardanyan · Publicado 2014-12-09 · Atualizado 2018-12-10 · CVE-2015-2820

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SAP Afaria version 7.0.6001.5

Description The issue allows a remote attacker to cause a denial of service by sending a specially crafted request. This can lead to process termination.

Recommendations For SAP Afaria version 7.0.6001.5, apply the fix as described in SAP Security Note 2132584 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-10122

CVE-2015-2820

Produtos afetados

Sap Afaria

Referências · 11

• http://securityfocus.com/archive/1/535832/100/800/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2820 · Nota de Segurança
• http://erpscan.com/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow · Nota
• https://bdu.fstec.ru/vul/2015-10122 · Nota de Segurança
• http://osvdb.org/show/osvdb/119598 · Nota
• http://packetstormsecurity.com/files/132362/SAP-Afaria-7-Denial-Of-Service.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2820 · Nota de Segurança
• https://erpscan.io/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow · Nota
• https://service.sap.com/sap/support/notes/2132584 · Nota
• http://seclists.org/fulldisclosure/2015/Jun/66 · Nota
• http://securityfocus.com/bid/73898 · Nota