EUVD-2015-7726

Malware in sbrugna...

SAP HANA Code Execution

The vulnerability of the SAP HANA database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely by using the TrexNet command in functions such as fcopydir, fmkdir, frmdir, getenv, dumpenv,...

SAP HANA Database Arbitrary Code Execution Vulnerability

SAP HANA Database is an in-memory, row- and column-based database from SAP. The database provides fast querying of multidimensional data, filtering out cluttered and useless data, and synchronized execution of multiple queries. A security vulnerability exists in SAP HANA Database 1.00 SPS10 and...

CVE-2015-7828

SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the 1 fcopydir, 2 fmkdir, 3 frmdir, 4 getenv, 5 dumpenv, 6 fcopy, 7 fput, 8 fdel, 9 fmove, 10 fget, 11 fappend, ...

CVE-2015-7828: Improper Input Validation

SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the 1 fcopydir, 2 fmkdir, 3 frmdir, 4 getenv, 5 dumpenv, 6 fcopy, 7 fput, 8 fdel, 9 fmove, 10 fget, 11 fappend, ...

PT-2015-2656

Name of the Vulnerable Software and Affected Versions SAP HANA Database version 1.00 SPS10 and earlier Description The issue allows remote attackers to execute arbitrary code due to insufficient input validation. This can be achieved by sending a TrexNet packet to various methods, including...