Description
SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash) via an invalid file name in an archive file, aka SAP Security Note 2312905.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.exploit-db.com/exploits/40230/ ↗
- http://seclists.org/fulldisclosure/2016/Aug/46 ↗
- http://www.securityfocus.com/bid/92406 ↗
- https://www.onapsis.com/blog/denial-service-attacks-sap-security-notes-august-2016 ↗
- http://www.securityfocus.com/archive/1/539180/100/0/threaded ↗
- http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html ↗
- https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities ↗