SAP Afaria Xcomms Process Buffer Overflow Vulnerability

SAP for "Systems Applications and Products in Data Processing" for short, is the SAP company's products - enterprise management solutions software name. A buffer overflow vulnerability exists in the Xcomms process in SAP Afaria version 7.00.6620.2 SP5. A remote attacker could exploit this...

CVE-2015-4092

Buffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted request, aka SAP Security Note 2153690...

Buffer overflow

Buffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted request, aka SAP Security Note 2153690...

CVE-2015-4092

SAP Afaria 7.00.6620.2 SP5 contains a Buffer Overflow in the XComms process (CVE-2015-4092). ERPScan/SAP advisories describe that an anonymous attacker can remotely exploit a crafted request to crash the server’s XComms component and potentially execute code. Impact includes DoS and, in some disc...

CVE-2015-4092

Buffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted request, aka SAP Security Note 2153690...

SAP Afaria Authentication Bypass Vulnerability

SAP Afaria is a mobile device management solution. The solution supports the effective management of mobile devices, applications, and data lifecycles and ensures their security during transmission and storage. An authentication bypass vulnerability exists in SAP Afaria, which allows remote...

SAP Afaria XComms Process Remote Buffer Overflow Vulnerability

SAP Afaria is a mobile device management solution. The solution supports the effective management of mobile devices, applications, and data lifecycles and ensures their security during transmission and storage. A remote buffer overflow vulnerability exists in SAP Afaria, which allows remote...

SAP Afaria XcListener Buffer Overflow Vulnerability

SAP Afaria is a mobile device management solution. A buffer overflow vulnerability exists in SAP Afaria XcListener, which allows remote attackers to submit a special request for a denial of service attack...

SAP Afaria XcListener Access Bypass Vulnerability

SAP Afaria is a mobile device management solution. An access restriction bypass vulnerability exists in SAP Afaria XcListener, which allows remote attackers to submit a special request for a denial of service attack...

CVE-2015-2820

Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service process termination via a crafted request, aka SAP Security Note 2132584...

CVE-2015-2816

The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905...

Buffer overflow

Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service process termination via a crafted request, aka SAP Security Note 2132584...

Design/Logic Flaw

The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905...

CVE-2015-2820

Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service process termination via a crafted request, aka SAP Security Note 2132584...

CVE-2015-2816

The CVE-2015-2816 issue affects SAP Afaria 7.0.6001.5 via the XcListener, which has a missing authorization check that can be exploited remotely (via crafted requests) to misuse service functionality and potentially cause DoS or information exposure. Technical details from ERPScan advisory show t...

CVE-2015-2816

The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905...

CVE-2015-2820

SAP Afaria’s XcListener is affected by a buffer overflow that can be triggered by a crafted request, causing remote denial of service (process termination). This is tied to CVE-2015-2820 and SAP Security Note 2132584. ERPScan’s advisory confirms the affected component and provides PoC details sho...

SAP Afaria 7 XComms - BoF

Application: SAP Afaria 7.00.6620.2 SP5 Vendor URL: http://www.sap.com Bugs: BoF Reported: 13.03.2015 Vendor response: 14.03.2015 Date of Public Advisory: 18.05.2015 Reference: SAP Security Note 2153690 Authors: Dmitry Chastukhin ERPScan Vulnerability information Class: XML External Entity CWE-12...

SAP Afaria - Stored XSS

Application: SAP Afaria 7 Vendor URL: http://www.sap.com Bugs: XSS Reported: 18.02.2015 Vendor response: 18.02.2015 Date of Public Advisory: 11.08.2015 Reference: SAP Security Note 2152669 Authors: Dmitry Chastukhin ERPScan Vulnerability information Class: XML External Entity CWE-79 Impact: Store...

SAP Afaria 7 XcListener - Missing authorization check

Application: SAP Afaria 7.0.6001.5 Vendor URL: http://www.sap.com Bugs: Missing authorization check Reported: 09.12.2014 Vendor response: 10.12.2014 Date of Public Advisory: 15.03.2015 Reference: SAP Security Note 2134905 Authors: Vahagn Vardanyan ERPScan Vulnerability information Class: DoS...