CVE-2015-3449

概要

参考情報

• packetstormsecurity.com/files/132681/SAP-Afaria-XeService.exe-7.0.6398.0-Weak-File-Permissions.html
• seclists.org/fulldisclosure/2015/Jul/60
• securityfocus.com/bid/75725
• portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-3449

afaria のその他の脆弱性

• CVE-2015-8753緊急 9.1SAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related …
• CVE-2015-6663中 4.3Cross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP Afaria 7 allows remote attackers to inject a…
• CVE-2015-4092高 7.5Buffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to cause a denial of service (crash) or possibly…
• CVE-2015-2820中 5.0Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service (process termination) via a craf…
• CVE-2015-2816高 7.5The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a cr…