Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other unspecified vectors related to "numerous other fields."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP DB Web Server waHTTP.exe远程栈缓冲区溢出漏洞
Vulnerability Description
SAP DB是德国SAP公司推出的开源数据库服务器。 SAP DB 7.3至7.5版本中的waHTTP.exe (又名SAP DB Web Server)中存在多个基于栈的缓冲区溢出漏洞。远程攻击者利用这些漏洞通过(1)某些cookie值(2)某些额外的参数，执行任意脚本代码。与sapdbwa_GetQueryString有关，和与‘大量其他字段’的其他未明向量相关。
CVSS Information
N/A
Vulnerability Type
N/A