CVE-2015-2282

Mô tả

Tham khảo

• packetstormsecurity.com/files/131883/SAP-LZC-LZH-Compression-Denial-Of-Service.html · Exploit
• seclists.org/fulldisclosure/2015/May/50 · Exploit
• seclists.org/fulldisclosure/2015/May/96 · Exploit
• coresecurity.com/advisories/sap-lzc-lzh-compression-multiple-vulnerabilities · Exploit
• securityfocus.com/archive/1/535535/100/0/threaded
• securityfocus.com/bid/74643

Lỗ hổng khác của maxdb

• CVE-2018-2450CAO 7.2SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and the…
• CVE-2015-2278TRUNG BÌNH 5.0The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Applicatio…
• CVE-2010-1185NGHIÊM TRỌNG 10.0Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code…
• CVE-2008-1810TRUNG BÌNH 4.4Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH envi…
• CVE-2008-0307NGHIÊM TRỌNG 9.3Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code vi…