[ERPSCAN-15-012] SAP Afaria 7 XComms – Buffer Overflow

ERPSCAN Research Advisory ERPSCAN-15-012 SAP Afaria 7 XComms – Buffer Overflow Application: SAP Afaria 7 Versions Affected: SAP Afaria 7, probably others Vendor URL: http://SAP.com Bugs: Buffer Overflow Sent: 13.03.2015 Reported: 14.03.2015 Vendor response: 14.03.2015 Date of Public Advisory:...

CVE-2015-4092

SAP Afaria 7.00.6620.2 SP5 contains a Buffer Overflow in the XComms process (CVE-2015-4092). ERPScan/SAP advisories describe that an anonymous attacker can remotely exploit a crafted request to crash the server’s XComms component and potentially execute code. Impact includes DoS and, in some disc...