mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 10:41:43 +00:00
21 lines
906 B
Markdown
21 lines
906 B
Markdown
|
### [CVE-2015-7986](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7986)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html
|
||
|
|
- http://seclists.org/fulldisclosure/2016/Jan/94
|
||
|
|
- https://erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption/
|
||
|
|
- https://www.exploit-db.com/exploits/39382/
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/ARPSyndicate/cvemon
|
||
|
|
|