CVE-2015-2820

SAP Afaria’s XcListener is affected by a buffer overflow that can be triggered by a crafted request, causing remote denial of service (process termination). This is tied to CVE-2015-2820 and SAP Security Note 2132584. ERPScan’s advisory confirms the affected component and provides PoC details sho...

SAP Afaria 7 XcListener - Buffer overflow

Application: SAP Afaria 7.0.6001.5 Vendor URL: http://www.sap.com Bugs: BoF Reported: 09.12.2014 Vendor response: 10.12.2014 Date of Public Advisory: 15.03.2015 Reference: SAP Security Note 2132584 Author: Vahagn Vardanyan ERPScan Vulnerability information Class: DoS CWE-400 Impact: DoS Remotely...