ID

VAR-E-201505-0445


CVE

cve_id:CVE-2015-2282

Trust: 0.3

cve_id:CVE-2015-2278

Trust: 0.3

sources: BID: 74643

TITLE

Multiple SAP Products Buffer Overflow and Denial of Service Vulnerabilities

Trust: 0.3

sources: BID: 74643

DESCRIPTION

Multiple SAP Products are prone to a buffer-overflow vulnerability and a denial-of-service vulnerability.
Remote attackers can exploit these issues to execute arbitrary code in the context of the application or cause denial-of-service conditions.

Trust: 0.3

sources: BID: 74643

AFFECTED PRODUCTS

vendor:sapmodel:sapcar archive toolscope:eqversion:0

Trust: 0.3

vendor:sapmodel:rfc sdkscope:eqversion:0

Trust: 0.3

vendor:sapmodel:netweaver rfc sdkscope:eqversion:0

Trust: 0.3

vendor:sapmodel:netweaver application server javascope:eqversion:0

Trust: 0.3

vendor:sapmodel:netweaver application server abapscope:eqversion:0

Trust: 0.3

vendor:sapmodel:maxdb databasescope:eqversion:0

Trust: 0.3

vendor:sapmodel:guiscope:eqversion:0

Trust: 0.3

sources: BID: 74643

EXPLOIT

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Trust: 0.3

sources: BID: 74643

PRICE

Free

Trust: 0.3

sources: BID: 74643

TYPE

Design Error

Trust: 0.3

sources: BID: 74643

CREDITS

Martin Gallo of Core Security Consulting Services.

Trust: 0.3

sources: BID: 74643

EXTERNAL IDS

db:NVDid:CVE-2015-2282

Trust: 0.3

db:NVDid:CVE-2015-2278

Trust: 0.3

db:BIDid:74643

Trust: 0.3

sources: BID: 74643

REFERENCES

url:http://www.sap.com

Trust: 0.3

sources: BID: 74643

SOURCES

db:BIDid:74643

LAST UPDATE DATE

2022-07-27T10:03:05.907000+00:00


SOURCES UPDATE DATE

db:BIDid:74643date:2015-05-13T00:00:00

SOURCES RELEASE DATE

db:BIDid:74643date:2015-05-13T00:00:00