SAP MaxDB cons.exe远程命令注入漏洞

BUGTRAQ ID: 27206 MaxDB是SAP应用中广泛使用的数据库管理系统。 MaxDB在处理用户请求数据时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 如果未经认证的远程攻击者执行了show或execsdbinfo等特殊命令的话，MaxDB服务器就会通过system执行cons.exe DATABASE COMMAND，而使用system执行cons程序允许外部攻击者通过传送&&或其他方式在服务器上执行任意命令。例如，可使用以下SAP命令查看Windows上C盘的内容： execsdbinfo && echo dir c:\ | cmd.exe SAP...

SAP MaxDB <= 7.6.03.07 pre-auth Remote Command Execution Exploit

No description provided by source. Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemm...

Pre-auth remote commands execution in SAP MaxDB 7.6.03.07

Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

SAP MaxDB shell characters security vulnerability

Shell characters vulnerability on executing pre-authentication execsdbinfo command...

SAP MaxDB 7.6.03.07 - Remote Command Execution

SAP MaxDB 7.6.03.07 - Remote Command Execution Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author:...

SAP MaxDB <= 7.6.03.07 pre-auth Remote Command Execution Exploit

Exploit for multiple platform in category remote exploits ================================================================ SAP MaxDB = 7.6.03.07 pre-auth Remote Command Execution Exploit ================================================================ Luigi Auriemma Application: SAP MaxDB...

SAP MaxDB cons.exe Remote Command Injection

SAP MaxDB is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. Module Options msf use auxiliary/admin/maxdb/maxdb/consexec msf undefinedconsexec show actions ...actions... msf undefinedconsexec set ACTION msf undefinedconsexe...

SAP MaxDB 7.6.03.07 - Remote Command Execution

Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

SAP MaxDB未明远程执行漏洞

BUGTRAQ ID: 26822 CNCAN ID:CNCAN-2007121207 MaxDB是SAP授权给MySQL的基于SAP DB的数据库。 SAP MaxDB存在未明安全问题，本地攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 SAP MaxDB 7.6.00.37 SAP MaxDB 7.4.3.32 目前没有解决方案提供： https://www.sdn.sap.com/irj/sdn/maxdb...