Описание
The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.
The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2015-7986
- https://erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption
- https://www.exploit-db.com/exploits/39382
- http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html
- http://scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review
- http://seclists.org/fulldisclosure/2016/Jan/94
- http://www.securityfocus.com/archive/1/537376/100/0/threaded
Связанные уязвимости
The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.
Уязвимость системы управления базами данных SAP HANA, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании