4 matches found
PT-2017-18582
Name of the Vulnerable Software and Affected Versions SAP SAPCAR version 721.510 Description The issue is a Heap Based Buffer Overflow that can be exploited with a crafted CAR archive file from an untrusted remote source. The problem arises because the length of data written is determined by an...
CVE-2016-5847
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384...
PT-2016-6714
Name of the Vulnerable Software and Affected Versions SAP SAPCAR affected versions not specified Description The issue allows local users to change the permissions of arbitrary files and gain privileges via a hard link attack on files extracted from an archive. Recommendations At the moment, ther...
PT-2016-6713
Name of the Vulnerable Software and Affected Versions SAP SAPCAR affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a program crash, by including an invalid file name in an archive file. This occurs because SAP SAPCAR does not...