CVE-2006-6346

Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...

CVE-2006-6345

Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...

CVE-2006-6345: Undefined Security Weakness

Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...

CVE-2006-6346: Undefined Security Weakness

Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...

CVE-2006-4133

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CVE-2006-4134: Undefined Security Weakness

Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service IGS 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service service shutdown via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details...

CVE-2006-4133: Undefined Security Weakness

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteB ufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Buffer...