Vulnerability Details CVE-2015-2820
Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service (process termination) via a crafted request, aka SAP Security Note 2132584.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.039
EPSS Ranking 87.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/132362/SAP-Afaria-7-Denial-Of-Service.html
- http://seclists.org/fulldisclosure/2015/Jun/66
- http://www.securityfocus.com/archive/1/535832/100/800/threaded
- http://www.securityfocus.com/bid/73898
- https://erpscan.io/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow/
- http://packetstormsecurity.com/files/132362/SAP-Afaria-7-Denial-Of-Service.html
- http://seclists.org/fulldisclosure/2015/Jun/66
- http://www.securityfocus.com/archive/1/535832/100/800/threaded
- http://www.securityfocus.com/bid/73898
- https://erpscan.io/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow/