PT-2006-4974 · Sap · Sap Internet Graphics Server

Mariano Nuñez Di Croce · Published 2006-08-14 · Updated 2018-10-17 · CVE-2006-4133

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Service (IGS) versions 6.40 and earlier SAP Internet Graphics Service (IGS) versions 7.00 and earlier

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument. This triggers the overflow during error message construction when the snprintf function returns a negative value that is used in a memcpy operation.

Recommendations For SAP Internet Graphics Service (IGS) versions 6.40 and earlier, update to a version later than 6.40 to resolve the issue. For SAP Internet Graphics Service (IGS) versions 7.00 and earlier, update to a version later than 7.00 to resolve the issue. As a temporary workaround, consider restricting access to the HTTP request with the ADM:GETLOGFILE command to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-4133

Affected Products

Sap Internet Graphics Server

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2006-4133 · Security Note
• http://secunia.com/advisories/21448 · Vendor Advisory
• http://securitytracker.com/id?1016675 · Note
• http://securityfocus.com/archive/1/472889/100/0/threaded · Note
• http://securityfocus.com/archive/1/442840/100/0/threaded · Note
• http://securitytracker.com/id?1017534 · Note
• http://securityfocus.com/bid/19470 · Note
• http://securityfocus.com/archive/1/457286/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/3267 · Note
• http://kb.cert.org/vuls/id/259540 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28334 · Note
• http://securityreason.com/securityalert/1386 · Note
• http://cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdf · Note