CVE

Id
92665  
CVE No.
CVE-2016-5845  
Status
Candidate  
Description
SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash) via an invalid file name in an archive file, aka SAP Security Note 2312905.  
Phase
Assigned (20160626)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
791511 92665 CVE-2016-5845 BUGTRAQ:20160810 [CORE-2016-0006] - SAP CAR Multiple Vulnerabilities  View
791512 92665 CVE-2016-5845 URL:http://www.securityfocus.com/archive/1/archive/1/539180/100/0/threaded  View
791513 92665 CVE-2016-5845 EXPLOIT-DB:40230  View
791514 92665 CVE-2016-5845 URL:https://www.exploit-db.com/exploits/40230/  View
791515 92665 CVE-2016-5845 FULLDISC:20160810 [CORE-2016-0006] - SAP CAR Multiple Vulnerabilities  View
791516 92665 CVE-2016-5845 URL:http://seclists.org/fulldisclosure/2016/Aug/46  View
791517 92665 CVE-2016-5845 MISC:http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html  View
791518 92665 CVE-2016-5845 MISC:https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities  View
791519 92665 CVE-2016-5845 MISC:https://www.onapsis.com/blog/denial-service-attacks-sap-security-notes-august-2016  View
791520 92665 CVE-2016-5845 BID:92406  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4060 JVNDB-2016-004833 Huawei WS331a ルータのソフトウェアにおけるクロスサイトリクエストフォージェリの脆弱性 Huawei WS331a ルータのソフトウェアには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2016-6158 92665 7.1 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004833.html  View