SAP Internet Graphics Service HTTP请求远程缓冲区溢出漏洞

Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上存在缓冲区溢出漏洞，远程攻击者可以通过利用此漏洞在服务器上执行任意指令。 IGS的Web应用服务器是默认安装的，远程攻击者可以通过发送一个精心构造的HTTP请求导致溢出。成功利用此漏洞，在UNIX环境下，攻击者获取SAP系统管理员权限，在Windows系统下，攻击者可以获取系统权限。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40...

SAP Internet Graphics Service HTTP请求远程拒绝服务漏洞

Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上漏洞，远程攻击者可以通过利用此漏洞对服务器执行拒绝服务攻击，导致应用服务器进程中止。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40 Patchlevel = 15 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sap.com/...

CVE-2006-4133

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteB ufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Buffer...

Multiple SAP Internet Graphics Service security vulnerabilities

Buffer overflow and DoS conditions on HTTP requests parsing...

CVE-2005-1691

Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request...

CVE-2005-1691

SAP Internet Graphics Server (IGS) in SAP, prior to version 6.40 Patch 11, is affected by a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via .. sequences in an HTTP GET request. Root cause: improper validation of the request path leading t...

SAP R/3 Internet Graphics Server directory traversal

Directory traversal on accesing htdocs folder...

sap internet graphics server 6.40 - Directory Traversal

sap internet graphics server 6.40 - Directory Traversal source: https://www.securityfocus.com/bid/14369/info Internet Graphics Server is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote unauthoriz...

SAP Internet Graphics Server (IGS) Directory Traversal Vulnerability

The version of SAP Internet Graphics Server IGS installed on the remote host is affected by a directory traversal vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP GET request, to access arbitrary files on the remote host with the privileges of the...