CVE-2006-6346: Undefined Security Weakness

Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...

CVE-2006-6345: Undefined Security Weakness

Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...

SAP Internet Graphics Service HTTP请求远程拒绝服务漏洞

Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上漏洞，远程攻击者可以通过利用此漏洞对服务器执行拒绝服务攻击，导致应用服务器进程中止。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40 Patchlevel = 15 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sap.com/...

SAP Internet Graphics Service HTTP请求远程缓冲区溢出漏洞

Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上存在缓冲区溢出漏洞，远程攻击者可以通过利用此漏洞在服务器上执行任意指令。 IGS的Web应用服务器是默认安装的，远程攻击者可以通过发送一个精心构造的HTTP请求导致溢出。成功利用此漏洞，在UNIX环境下，攻击者获取SAP系统管理员权限，在Windows系统下，攻击者可以获取系统权限。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40...

CVE-2006-4133

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CVE-2006-4133: Undefined Security Weakness

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CVE-2006-4134: Undefined Security Weakness

Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service IGS 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service service shutdown via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details...

Multiple SAP Internet Graphics Service security vulnerabilities

Buffer overflow and DoS conditions on HTTP requests parsing...

CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteB ufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Buffer...