CVE-2016-6146

Description

References

• onapsis.com/research/security-advisories/sap-trex-tns-information-disclosure-nameserver · Permissions Required
• packetstormsecurity.com/files/138445/SAP-TREX-7.10-Revision-63-NameServer-TNS-Information-Disclosure.html · Third Party Advisory
• scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review · Vendor Advisory
• seclists.org/fulldisclosure/2016/Aug/93 · Third Party Advisory
• layersevensecurity.com/wp-content/uploads/2016/03/Layer-Seven-Security_SAP-Security-Notes_February-2016.pdf · Third Party Advisory

Autres vulnérabilités de trex

• CVE-2017-11459CRITIQUE 9.8SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execu…
• CVE-2016-6137CRITIQUE 9.8An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP S…
• CVE-2016-6147CRITIQUE 9.8An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via un…
• CVE-2016-6140CRITIQUE 9.8SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203…
• CVE-2016-6139CRITIQUE 9.8SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.