EUVD-2015-7726

Malware in sbrugna...

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary code.

The vulnerability of the SAP HANA database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely by using the TrexNet command in functions such as fcopydir, fmkdir, frmdir, getenv, dumpenv,...

SAP HANA Database Arbitrary Code Execution Vulnerability

SAP HANA Database is an in-memory, row- and column-based database from SAP. The database provides fast querying of multidimensional data, filtering out cluttered and useless data, and synchronized execution of multiple queries. A security vulnerability exists in SAP HANA Database 1.00 SPS10 and...

CVE-2015-7828

SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the 1 fcopydir, 2 fmkdir, 3 frmdir, 4 getenv, 5 dumpenv, 6 fcopy, 7 fput, 8 fdel, 9 fmove, 10 fget, 11 fappend, ...