CVE-2006-4133

3 documents3 sources
Severity
7.5HIGH
EPSS
18.0%
top 4.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SAP Internet Graphics Server
Timeline
PublishedAug 14
Latest updateMay 1

Description

Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-m56g-mv6p-cqvv: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6↗2022-05-01
▶
CVEList
CVE-2006-4133: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6↗2006-08-14
▶
CVE-2006-4133 (HIGH CVSS 7.5) | Heap-based buffer overflow in SAP I | cvebase.io