89 matches found
CVE-2007-3624
Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group...
CVE-2007-3624
CVE-2007-3624 describes a heap-based buffer overflow in SAP's Message Server, specifically in the Message HTTP Server when handling a long string in the group parameter to /msgserver/html/group. This allows remote, unauthenticated attackers to potentially execute arbitrary code or cause a denial ...
SAP Message Server heap buffer overflow
Overview The SAP Message Server contains a flaw that may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description The SAP Message Server is used to exchange and regulate messages between servers in a SAP network. A heap-based buffer...
SAP消息服务器Group参数远程堆溢出漏洞
BUGTRAQ ID: 24765 SAP消息服务器是SAP设备所使用的用于交换数据和内部消息的服务。 SAP消息服务器在处理畸形的GET请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向监听在SAP设备TCP 8100端口上的消息服务器发送了畸形的GET请求，并将URL /msgserver/html/group的Group参数指定为498字节，就可能触发堆溢出，导致拒绝服务或以系统权限执行任意指令。 SAP Message Server 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sap.com/ GET...
NGS-sapmes-heap.txt
======= Summary ======= Name: SAP Message Server Heap Overflow Release Date: 5 July 2007 Reference: NGS00485 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-292 Systems Affected: All Versions Risk: Critical Status: Fixed ======== TimeLine ======== Discovered: 4 January 2007 Release...
SAP Message Server Heap Overflow
======= Summary ======= Name: SAP Message Server Heap Overflow Release Date: 5 July 2007 Reference: NGS00485 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-292 Systems Affected: All Versions Risk: Critical Status: Fixed ======== TimeLine ======== Discovered: 4...
SAP Message Server - 'Group' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/24765/info SAP Message Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently sized buffer. Remote attackers can...
SAP Message Server - Group Remote Buffer Overflow
SAP Message Server - Group Remote Buffer Overflow source: https://www.securityfocus.com/bid/24765/info SAP Message Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data before copying it to an...