CVE-2006-4133
published 2006-08-14CVE-2006-4133: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service…
PriorityP338high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
6.28%
92.8th percentile
Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | internet_graphics_server | <= 6.40_patch_16 | — |
| sap | internet_graphics_server | <= 7.00_patch_3 | — |
| sap | internet_graphics_server | — | — |
| sap | internet_graphics_server | — | — |
| sap | internet_graphics_server | — | — |
| sap | internet_graphics_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-234f-wm58-6qqv: Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2006-6345 [HIGH] GHSA-234f-wm58-6qqv: Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6
Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial disclosure. Details will be updated after the grace period has ended. This issue is different from CVE-2006-4133 and CVE-2006-4134.
GHSA
GHSA-m56g-mv6p-cqvv: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6
ghsa_unreviewed·2022-05-01
CVE-2006-4133 [HIGH] GHSA-m56g-mv6p-cqvv: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6
Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/21448http://securityreason.com/securityalert/1386http://securitytracker.com/id?1016675http://securitytracker.com/id?1017534http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdfhttp://www.kb.cert.org/vuls/id/259540http://www.securityfocus.com/archive/1/442840/100/0/threadedhttp://www.securityfocus.com/archive/1/457286/100/0/threadedhttp://www.securityfocus.com/archive/1/472889/100/0/threadedhttp://www.securityfocus.com/bid/19470http://www.vupen.com/english/advisories/2006/3267https://exchange.xforce.ibmcloud.com/vulnerabilities/28334http://secunia.com/advisories/21448http://securityreason.com/securityalert/1386http://securitytracker.com/id?1016675http://securitytracker.com/id?1017534http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdfhttp://www.kb.cert.org/vuls/id/259540http://www.securityfocus.com/archive/1/442840/100/0/threadedhttp://www.securityfocus.com/archive/1/457286/100/0/threadedhttp://www.securityfocus.com/archive/1/472889/100/0/threadedhttp://www.securityfocus.com/bid/19470http://www.vupen.com/english/advisories/2006/3267https://exchange.xforce.ibmcloud.com/vulnerabilities/28334
2006-08-14
Published