Buffer overflow

Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Spool System, aka SAP Note 2061271...

CVE-2014-9595

Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Spool System, aka SAP Note 2061271...

CVE-2014-9594

The CVE-2014-9594 issue affects the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit. A buffer overflow in the Dispatcher (related to ABAP VM) allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. ERPScan notes that exploits ...

CVE-2014-9387

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SIPLATFORMSEARCHSERVERLOGONTOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905...

Code injection

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SIPLATFORMSEARCHSERVERLOGONTOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905...

CVE-2014-9387

SAP BusinessObjects Edge 4.1 is affected by CVE-2014-9387 through a crafted CORBA call that allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN and escalate privileges. The underlying cause is exposure of a login token via CORBA, enabling complete confidentiality, integrit...

[Onapsis Security Advisory 2014-029] SAP Business Objects Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-020: SAP Business Objects Information Disclosure 1. Impact on Business ===================== A malicious user can discover information relating to valid users using a vulnerable Business Objects Enterprise instance. This...

[Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory2014-022: SAP HANA IU5 SDK Authentication Bypass This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

[Onapsis Security Advisory 2014-021] SAP HANA XS Missing encryption in form-based authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-021: SAP HANA XS Missing encryption in form-based authentication This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain...

[Onapsis Security Advisory 2013-003] SAP Enterprise Portal Cross-Site-Scripting

Onapsis Security Advisory 2013-003: SAP Enterprise Portal Cross-Site-Scripting This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand information on upcoming advisories,...

SAP Host Control SOAP Web Service 'Database/Name' Command Execution (SAP Note 1341333)

The version of SAP Host Control, offered by 'sapstartsrv.exe', fails to sanitize user input to the 'Database/Name' parameter when calling the 'GetDatabaseStatus' SOAP method. A remote, unauthenticated attacker may use this to run commands that, by default, run as SYSTEM. Note that while this...

ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability

ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-032 March 16, 2010 -- Affected Vendors: SAP -- Affected Products: SAP MaxDB -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been...

[Onapsis Security Advisory 2010-001] SAP WebAS Integrated ITS Remote Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2010-001: SAP WebAS Integrated ITS Remote Command Execution This advisory can be downloaded from http://www.onapsis.com/research.html. By downloading this advisory from the Onapsis Resource Center, you will gain access to...

SAP Kernel 'sapstartsrv'拒绝服务漏洞

Bugraq ID: 37286 在SAP实例中，sapstartsrv服务提供WEB SAP管理控制接口用于远程管理。由于不正确处理特殊构建的请求，远程攻击者可以利用漏洞使进程关闭。 成功利用漏洞允许远程攻击者对SAP管理控制台进行拒绝服务攻击，导致SAP管理控制台拒绝访问，进行任何管理操作。 SAP Kernel 7.20 SAP Kernel 7.11 SAP Kernel 7.01 SAP Kernel 7.00 SAP Kernel 6.40 SAP Note 1302231已经提供安全补丁，建议用户参考下载： http://www.sap.com/...

SAP GUI for Windows sapirrfc.dll Overflow

SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow www.Abysssec.com Public Exploit / Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor response: 17.11.2008 Date of Public...

SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit ========================================================= Title: SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit...

SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit

No description provided by source. html title SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow /title center h1 www.Abysssec.com Public Exploit h1 /center object classid='clsid:77F12F8A-F117-11D0-8CF1-00A0C91D9D87' id='target' / script / Application: SAP GUI for Windows, EnjoySAP Version...

SAP GUI for Windows - sapirrfc.dll ActiveX Overflow

SAP GUI for Windows - sapirrfc.dll ActiveX Overflow SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow www.Abysssec.com Public Exploit / Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported:...

SAP GUI for Windows - 'sapirrfc.dll' ActiveX Overflow

SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow www.Abysssec.com Public Exploit / Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor response: 17.11.2008 Date of Public...

[DSECRG-09-043] SAP GUI 7.1 Insecure Method

Digital Security Research Group DSecRG Advisory DSECRG-09-043 Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: http://SAP.com Bugs: insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor respons...