CVE-2005-4815

EPSS 2.58%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 16.06.2026 22:19:30
Erkennungen
Login

SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the "FX SAP R/3 gwrd vuln."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ SAP R3 Version 4.6_before_patch_1767

SAP ≫ SAP R3 Version 6.2_before_patch_1364

SAP ≫ SAP R3 Version 6.4_before_patch_4

SAP ≫ SAP R3 Version 31_before_31i_patch_735

SAP ≫ SAP R3 Version 40_before_patch_1008

SAP ≫ SAP R3 Version 45_before_patch_913

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.58%	0.839

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securityfocus.com/archive/1/451378/100/0/threaded

http://lists.darklab.org/pipermail/darklab/2006-January/000209.html

http://lists.virus.org/darklab-0509/msg00011.html

http://lists.virus.org/darklab-0509/msg00017.html

http://lists.virus.org/darklab-0509/msg00018.html

https://nvd.nist.gov/vuln/detail/CVE-2005-4815

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4815

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4815

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2005-4815