Lucene search

[email protected]CVE-2010-1185

HistoryMar 29, 2010 - 10:30 p.m.

CVE-2010-1185

2010-03-2922:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve

2010

1185

stack-based buffer overflow

sap maxdb

remote code execution

security vulnerability

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.43 Medium

EPSS

Percentile

97.3%

JSON

Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code via an invalid length parameter in a handshake packet to TCP port 7210. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
sap:maxdbsap maxdbeq7.6.06
sap:maxdbsap maxdbeq7.6.0.37
sap:maxdbsap maxdbeq7.4.3.32

CPE	Name	Operator	Version
sap:maxdb	sap maxdb	eq	7.6.06
sap:maxdb	sap maxdb	eq	7.6.0.37
sap:maxdb	sap maxdb	eq	7.4.3.32

References

osvdb.org/63047

secunia.com/advisories/38955

www.securityfocus.com/archive/1/510125/100/0/threaded

www.securityfocus.com/bid/38769

www.securitytracker.com/id?1023719

www.vupen.com/english/advisories/2010/0643

www.zerodayinitiative.com/advisories/ZDI-10-032/

exchange.xforce.ibmcloud.com/vulnerabilities/56950

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.43 Medium

EPSS

Percentile

97.3%

JSON

Related for CVE-2010-1185

cvelist1 prion1 ubuntucve1 openvas1 zdi1 checkpoint_advisories1