5582 matches found
CVE-2012-2612
The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...
CVE-2012-2512
CVE-2012-2512 affects SAP NetWeaver Dispatcher (7.0 EHP1/EHP2) via disp+work.exe: DiagTraceStreamI vulnerability triggered by crafted SAP Diag packets over remote TCP causes a denial of service (daemon crash). Vulnerable versions include disp+work.exe v7010.29.15.58313 and v7200.70.18.23869. Impa...
CVE-2012-2513
CVE-2012-2513 affects SAP NetWeaver Dispatcher (disp+work.exe) in SAP NetWeaver 7.0 EHP1/EHP2. The vulnerability is triggered in the vulnerable dispatcher by sending specially crafted SAP Diag packets, targeting the Diaginput function, potentially causing a remote denial of service (daemon crash)...
CVE-2012-2514
CVE-2012-2514 affects SAP NetWeaver Dispatcher in SAP NetWeaver 7.0 EHP1 (disp+work.exe v7010.29.15.58313) and EHP2 (v7200.70.18.23869). The vulnerability is in the DiagiEventSource function of the Dispatcher, exploitable by remotely crafted SAP Diag packets to cause a denial of service (daemon c...
CVE-2012-2612
CVE-2012-2612 refers to a Denial of Service in SAP NetWeaver Dispatcher (disp+work.exe) 7.0 EHP1/EHP2 where the DiagTraceHex function can be triggered by crafted SAP Diag packets to cause a daemon crash. Affected component: Dispatcher service within SAP NetWeaver 7.0 EHP1/EHP2 (disp+work.exe v701...
CVE-2012-2511
CVE-2012-2511 affects SAP NetWeaver Dispatcher 7.0 EHP1/EHP2, specifically the disp+work.exe components (versions v7010.29.15.58313 and v7200.70.18.23869). The DiagTraceAtoms function is the root cause: processing crafted SAP Diag packets in the Dispatcher can trigger a remote, unauthenticated de...
CVE-2012-2514
The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...
CVE-2012-2611
CVE-2012-2611 affects SAP NetWeaver Dispatcher where the DiagTraceR3Info function in disp+work.exe can overflow a stack buffer when Developer Traces are enabled at level 2 or higher, enabling remote code execution via crafted SAP Diag packets. Affected: SAP NetWeaver Dispatcher (7.0 EHP1/EHP2) wi...
PT-2012-4135
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SAP Diag packet to the DiagTraceHex function in disp+work.exe...
PT-2012-4072
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a crafted SAP Diag packet. This is due to a problem in the Diaginput function in...
PT-2012-4071
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a crafted SAP Diag packet. This is due to a problem in the DiagTraceStreamI function in...
PT-2012-4134
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to execute arbitrary code via a crafted SAP Diag packet when a certain Developer Trace configuration is enabled in the DiagTraceR3Info function...
CVE-2012-2512: Improper Restriction of Operations within the Bounds of a Memory Buffer
The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...
CVE-2012-2611: Improper Input Validation
The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packe...
CVE-2012-2511: Improper Restriction of Operations within the Bounds of a Memory Buffer
The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...
CVE-2012-2514: Improper Restriction of Operations within the Bounds of a Memory Buffer
The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...
CVE-2012-2612: Improper Restriction of Operations within the Bounds of a Memory Buffer
The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...
PT-2012-4070
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SAP Diag packet to the DiagTraceAtoms function in disp+work.exe...
PT-2012-4073
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SAP Diag packet to the DiagiEventSource function in disp+work.exe...
CVE-2012-2513: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...