NVD

Id
44344  
Name
CVE-2012-2611  
Description
The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packet.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-05-15  
Modified Date
2012-08-18  
Seq
2012-2611  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222465 44344 CVE-2012-2611 http://scn.sap.com/docs/DOC-8218  View
222466 44344 CVE-2012-2611 http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities  View
222467 44344 CVE-2012-2611 1027052  View
222468 44344 CVE-2012-2611 https://service.sap.com/sap/support/notes/1687910  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26698 JVNDB-2012-002405 SAP NetWeaver の DiagTraceR3Info 関数における任意のコードを実行される脆弱性 SAP NetWeaver のディスパッチャにおける disp+work.exe のダイアログプロセッサ内の DiagTraceR3Info 関数には、特定の Developer Trace 設定が有効の場合、任意のコードを実行される脆弱性が存在します。 CVE-2012-2611 55849 CVE-2012-2611 44344 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002405.html 2012-05-15 2012-05-16 View