Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP Internet Graphics Service HTTP请求拒绝服务攻击漏洞
Vulnerability Description
Internet Graphics Server (IGS)是SAP R/3企业环境的一个组件，可提供图形服务。 IGS的Web应用服务器是默认安装的，远程攻击者可以通过发送一个精心构造的HTTP请求导致溢出。成功利用此漏洞，在UNIX环境下，攻击者获取SAP系统管理员权限，在Windows系统下，攻击者可以获取系统权限。
CVSS Information
N/A
Vulnerability Type
N/A