CVE-2016-6147

概要

参考情報

• packetstormsecurity.com/files/138446/SAP-TREX-7.10-Revision-63-Remote-Command-Execution.html
• seclists.org/fulldisclosure/2016/Aug/94
• securityfocus.com/bid/92066 · Third Party Advisory
• onapsis.com/blog/analyzing-sap-security-notes-february-2016 · Third Party Advisory
• onapsis.com/research/security-advisories/sap-trex-remote-command-execution-0 · Permissions Required

trex のその他の脆弱性

• CVE-2017-11459緊急 9.8SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execu…
• CVE-2016-6146中 5.3The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Se…
• CVE-2016-6137緊急 9.8An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP S…
• CVE-2016-6140緊急 9.8SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203…
• CVE-2016-6139緊急 9.8SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.