PT-2015-2577 · Sap · Sap Hana

Mathieu Geli · Publicado 2015-10-27 · Atualizado 2018-12-10 · CVE-2015-7986

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP HANA version 1.00.095

Description The issue is caused by a buffer overflow in the index server component of the SAP HANA database management system. This allows remote attackers to execute arbitrary code or cause a denial of service via a specially crafted HTTP request.

Recommendations For SAP HANA version 1.00.095, apply the fix as described in SAP Security Note 2197428 to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-11942

CVE-2015-7986

Produtos afetados

Sap Hana

Referências · 10

• 🔥 http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html · Exploit
• 🔥 https://exploit-db.com/exploits/39382 · Exploit
• https://erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption · Nota
• http://securityfocus.com/archive/1/537376/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7986 · Nota de Segurança
• https://websmp230.sap-ag.de/sap/support/notes/2197428 · Nota
• http://scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11942 · Nota de Segurança
• http://seclists.org/fulldisclosure/2016/Jan/94 · Nota
• http://erpscan.com/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption · Nota