CVE-2014-6283

概要

参考情報

• blog.spiderlabs.com/2014/09/cve-2014-6283-sap-ase-missing-authorization-checks-and-arbitrary-code-execution.html · Exploit
• scn.sap.com/docs/DOC-55451 · Vendor Advisory
• secunia.com/advisories/61238
• exchange.xforce.ibmcloud.com/vulnerabilities/99935
• service.sap.com/sap/support/notes/2044220 · Permissions Required
• www3.trustwave.com/spiderlabs/advisories/TWSL2014-013.txt · Exploit

adaptive server enterprise のその他の脆弱性

• CVE-2013-7245高 7.5The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database du…
• CVE-2017-5371高 7.5Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series of…
• CVE-2016-7402緊急 9.8SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system admini…
• CVE-2014-6284高 7.5SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and respons…
• CVE-2013-6868高 7.8SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 …