SAP Afaria XComms Process Remote Buffer Overflow Vulnerability
BID:74797
Info
SAP Afaria XComms Process Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 74797 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2015-4092 |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2015 12:00AM |
| Updated: | Jul 15 2015 12:16AM |
| Credit: | Dmitry Chastukhin (ERPScan) |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
SAP Afaria XComms Process Remote Buffer Overflow Vulnerability
SAP Afaria is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers may leverage this issue to execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial-of-service condition.
SAP Afaria is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers may leverage this issue to execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial-of-service condition.
Exploit / POC
SAP Afaria XComms Process Remote Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SAP Afaria XComms Process Remote Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.