CVE

Id
20237  
CVE No.
CVE-2006-4133  
Status
Candidate  
Description
Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187686 20237 CVE-2006-4133 BUGTRAQ:20060810 CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow  View
187687 20237 CVE-2006-4133 URL:http://www.securityfocus.com/archive/1/archive/1/442840/100/0/threaded  View
187688 20237 CVE-2006-4133 BUGTRAQ:20070118 CYBSEC - Security Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow  View
187689 20237 CVE-2006-4133 URL:http://www.securityfocus.com/archive/1/archive/1/457286/100/0/threaded  View
187690 20237 CVE-2006-4133 BUGTRAQ:20070705 SAP Internet Graphics Server XSS and Heap Overflow  View
187691 20237 CVE-2006-4133 URL:http://www.securityfocus.com/archive/1/archive/1/472889/100/0/threaded  View
187692 20237 CVE-2006-4133 MISC:http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdf  View
187693 20237 CVE-2006-4133 CERT-VN:VU#259540  View
187694 20237 CVE-2006-4133 URL:http://www.kb.cert.org/vuls/id/259540  View
187695 20237 CVE-2006-4133 BID:19470  View
187696 20237 CVE-2006-4133 URL:http://www.securityfocus.com/bid/19470  View
187697 20237 CVE-2006-4133 VUPEN:ADV-2006-3267  View
187698 20237 CVE-2006-4133 URL:http://www.vupen.com/english/advisories/2006/3267  View
187699 20237 CVE-2006-4133 SECTRACK:1016675  View
187700 20237 CVE-2006-4133 URL:http://securitytracker.com/id?1016675  View
187701 20237 CVE-2006-4133 SECTRACK:1017534  View
187702 20237 CVE-2006-4133 URL:http://securitytracker.com/id?1017534  View
187703 20237 CVE-2006-4133 SECUNIA:21448  View
187704 20237 CVE-2006-4133 URL:http://secunia.com/advisories/21448  View
187705 20237 CVE-2006-4133 SREASON:1386  View
187706 20237 CVE-2006-4133 URL:http://securityreason.com/securityalert/1386  View
187707 20237 CVE-2006-4133 XF:sap-igs-http-bo(28334)  View

Related JVN