SAP Internet Graphics Service HTTP请求远程缓冲区溢出漏洞

Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上存在缓冲区溢出漏洞，远程攻击者可以通过利用此漏洞在服务器上执行任意指令。 IGS的Web应用服务器是默认安装的，远程攻击者可以通过发送一个精心构造的HTTP请求导致溢出。成功利用此漏洞，在UNIX环境下，攻击者获取SAP系统管理员权限，在Windows系统下，攻击者可以获取系统权限。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40...

SAP Internet Graphics Service HTTP请求远程拒绝服务漏洞

Internet Graphics Server （IGS）是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器实现上漏洞，远程攻击者可以通过利用此漏洞对服务器执行拒绝服务攻击，导致应用服务器进程中止。 SAP Internet Graphics Server 7.00 Patchlevel = 3 SAP Internet Graphics Server 6.40 Patchlevel = 15 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sap.com/...

CVE-2006-4133

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteB ufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Buffer...

Multiple SAP Internet Graphics Service security vulnerabilities

Buffer overflow and DoS conditions on HTTP requests parsing...

CVE-2005-1691

Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request...

CVE-2005-1691

SAP Internet Graphics Server (IGS) in SAP, prior to version 6.40 Patch 11, is affected by a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via .. sequences in an HTTP GET request. Root cause: improper validation of the request path leading t...

SAP R/3 Internet Graphics Server directory traversal

Directory traversal on accesing htdocs folder...

SAP Internet Graphics Server (IGS) Directory Traversal Vulnerability

The version of SAP Internet Graphics Server IGS installed on the remote host is affected by a directory traversal vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP GET request, to access arbitrary files on the remote host with the privileges of the...

sap internet graphics server 6.40 - Directory Traversal

sap internet graphics server 6.40 - Directory Traversal source: https://www.securityfocus.com/bid/14369/info Internet Graphics Server is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote unauthoriz...