7.5

CVE-2005-4815

EPSS 2.31%
Published 31.12.2005 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the "FX SAP R/3 gwrd vuln."

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

SAP ≫ SAP R3 Version4.6_before_patch_1767

SAP ≫ SAP R3 Version6.2_before_patch_1364

SAP ≫ SAP R3 Version6.4_before_patch_4

SAP ≫ SAP R3 Version31_before_31i_patch_735

SAP ≫ SAP R3 Version40_before_patch_1008

SAP ≫ SAP R3 Version45_before_patch_913

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.31%	0.841

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.securityfocus.com/archive/1/451378/100/0/threaded

http://lists.darklab.org/pipermail/darklab/2006-January/000209.html

http://lists.virus.org/darklab-0509/msg00011.html

http://lists.virus.org/darklab-0509/msg00017.html

http://lists.virus.org/darklab-0509/msg00018.html

https://nvd.nist.gov/vuln/detail/CVE-2005-4815

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4815

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4815

EUVD