NVD

Id
33819  
Name
CVE-2014-6283  
Description
SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 before ESD#4.4 does not properly restrict access, which allows remote authenticated database users to (1) overwrite the master encryption key or (2) trigger a buffer overflow via a crafted RPC message to the hacmpmsgxchg function, and possibly other vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-17  
Modified Date
2016-09-06  
Seq
2014-6283  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175680 33819 CVE-2014-6283 http://blog.spiderlabs.com/2014/09/cve-2014-6283-sap-ase-missing-authorization-checks-and-arbitrary-code-execution.html  View
175681 33819 CVE-2014-6283 http://scn.sap.com/docs/DOC-55451  View
175682 33819 CVE-2014-6283 sap-ase-cve20146283-priv-esc(99935)  View
175683 33819 CVE-2014-6283 https://service.sap.com/sap/support/notes/2044220  View
175684 33819 CVE-2014-6283 https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-013.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16100 JVNDB-2014-004975 SAP Adaptive Server Enterprise におけるマスタ暗号鍵を上書きされる脆弱性 SAP Adaptive Server Enterprise (ASE) は、アクセスを適切に制限しないため、(1) マスタ暗号鍵を上書きされる、または (2) バッファオーバーフローを誘発される脆弱性が存在します。 CVE-2014-6283 73575 CVE-2014-6283 33819 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004975.html 2014-09-12 2014-10-24 View