7.5

CVE-2005-4815

EPSS 2.31%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the "FX SAP R/3 gwrd vuln."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ SAP R3 Version4.6_before_patch_1767

SAP ≫ SAP R3 Version6.2_before_patch_1364

SAP ≫ SAP R3 Version6.4_before_patch_4

SAP ≫ SAP R3 Version31_before_31i_patch_735

SAP ≫ SAP R3 Version40_before_patch_1008

SAP ≫ SAP R3 Version45_before_patch_913

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.31%	0.841

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.securityfocus.com/archive/1/451378/100/0/threaded

http://lists.darklab.org/pipermail/darklab/2006-January/000209.html

http://lists.virus.org/darklab-0509/msg00011.html

http://lists.virus.org/darklab-0509/msg00017.html

http://lists.virus.org/darklab-0509/msg00018.html

https://nvd.nist.gov/vuln/detail/CVE-2005-4815

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4815

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4815

EUVD