73 matches found
Multiple SAP Internet Graphics Service security vulnerabilities
File removal, insecure undocumented features, buffer overflow, crossite scripting...
SAP Internet Graphics Service buffer overflow
Overview SAP Internet Graphics Service contains a buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description According to SAP,The Internet Graphics Service IGS constitutes the infrastructure to enable the...
SAP Internet Graphics Service未明目录遍历漏洞
Internet Graphics ServerIGS是SAP R/3企业环境的一个组件，可提供图形服务。 SAP IGS不正确处理特殊的HTTP请求，远程攻击者可以利用漏洞以应用程序进程权限查看SAP IGS文件系统上的任意文件。 目前没有详细漏洞细节提供。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 7.00 Patch 3 SAP Internet Graphics Server 7.00 Patch 2 SAP Internet Graphics Server 7.00 Patch...
CVE-2006-6345
Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...
CVE-2006-6346
Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...
CVE-2006-6346
Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...
CVE-2006-6345
Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...
CVE-2006-6346
SAP Internet Graphics Service (IGS) affected: 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier (CVE-2006-6346). Described as an unspecified vulnerability related to "Undocumented Features" that could allow remote attackers to cause a denial of service, obtain configuration files,...
SAP Internet Graphics Service HTTP请求远程拒绝服务漏洞
Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上漏洞，远程攻击者可以通过利用此漏洞对服务器执行拒绝服务攻击，导致应用服务器进程中止。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40 Patchlevel = 15 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sap.com/...
SAP Internet Graphics Service HTTP请求远程缓冲区溢出漏洞
Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上存在缓冲区溢出漏洞，远程攻击者可以通过利用此漏洞在服务器上执行任意指令。 IGS的Web应用服务器是默认安装的，远程攻击者可以通过发送一个精心构造的HTTP请求导致溢出。成功利用此漏洞，在UNIX环境下，攻击者获取SAP系统管理员权限，在Windows系统下，攻击者可以获取系统权限。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40...
CVE-2006-4133
Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteB ufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Buffer...