PT-2006-4975 · Sap · Sap Internet Graphics Server

Mariano Nunez Di Croce · Published 2006-08-14 · Updated 2018-10-17 · CVE-2006-4134

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Service (IGS) versions 6.40 and earlier SAP Internet Graphics Service (IGS) versions 7.00 and earlier

Description The issue is related to a design flaw in the SAP Internet Graphics Service, allowing remote attackers to cause a denial of service, specifically a service shutdown, by sending certain HTTP requests.

Recommendations For SAP Internet Graphics Service (IGS) versions 6.40 and earlier, update to a version later than 6.40 to resolve the issue. For SAP Internet Graphics Service (IGS) versions 7.00 and earlier, update to a version later than 7.00 to resolve the issue.

Fix

Related Identifiers

CVE-2006-4134

Affected Products

Sap Internet Graphics Server

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-4134 · Security Note
• http://secunia.com/advisories/21448 · Vendor Advisory
• http://cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Denial_of_Service.pdf · Note
• http://securitytracker.com/id?1016675 · Note
• http://marc.info/?l=bugtraq&m=115524314804055&w=2 · Note
• http://securityfocus.com/archive/1/442838/100/0/threaded · Note
• http://securityreason.com/securityalert/1390 · Note
• http://vupen.com/english/advisories/2006/3267 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28328 · Note
• http://securityfocus.com/bid/19469 · Note