Lucene search

K
nvd[email protected]NVD:CVE-2005-4815
HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-4815

2005-12-3105:00:00
web.nvd.nist.gov
5

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.047

Percentile

92.7%

SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the “FX SAP R/3 gwrd vuln.”

Affected configurations

Nvd
Node
sapsap_r_3Match4.6_before_patch_1767
OR
sapsap_r_3Match6.2_before_patch_1364
OR
sapsap_r_3Match6.4_before_patch_4
OR
sapsap_r_3Match31_before_31i_patch_735
OR
sapsap_r_3Match40_before_patch_1008
OR
sapsap_r_3Match45_before_patch_913
VendorProductVersionCPE
sapsap_r_34.6_before_patch_1767cpe:2.3:a:sap:sap_r_3:4.6_before_patch_1767:*:*:*:*:*:*:*
sapsap_r_36.2_before_patch_1364cpe:2.3:a:sap:sap_r_3:6.2_before_patch_1364:*:*:*:*:*:*:*
sapsap_r_36.4_before_patch_4cpe:2.3:a:sap:sap_r_3:6.4_before_patch_4:*:*:*:*:*:*:*
sapsap_r_331_before_31i_patch_735cpe:2.3:a:sap:sap_r_3:31_before_31i_patch_735:*:*:*:*:*:*:*
sapsap_r_340_before_patch_1008cpe:2.3:a:sap:sap_r_3:40_before_patch_1008:*:*:*:*:*:*:*
sapsap_r_345_before_patch_913cpe:2.3:a:sap:sap_r_3:45_before_patch_913:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.047

Percentile

92.7%

Related for NVD:CVE-2005-4815