PT-2014-1950 · Sap · Sap Afaria

Vahagn Vardanyan · Published 2014-12-09 · Updated 2018-12-10 · CVE-2015-2820

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SAP Afaria version 7.0.6001.5

Description The issue allows a remote attacker to cause a denial of service by sending a specially crafted request. This can lead to process termination.

Recommendations For SAP Afaria version 7.0.6001.5, apply the fix as described in SAP Security Note 2132584 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-10122

CVE-2015-2820

Affected Products

Sap Afaria

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2015-2820 · Security Note
• https://bdu.fstec.ru/vul/2015-10122 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2820 · Security Note
• http://securityfocus.com/archive/1/535832/100/800/threaded · Note
• http://erpscan.com/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow · Note
• http://osvdb.org/show/osvdb/119598 · Note
• http://packetstormsecurity.com/files/132362/SAP-Afaria-7-Denial-Of-Service.html · Note
• https://erpscan.io/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow · Note
• https://service.sap.com/sap/support/notes/2132584 · Note
• http://seclists.org/fulldisclosure/2015/Jun/66 · Note
• http://securityfocus.com/bid/73898 · Note