CVE-2005-4815: High severity SAP Sap R 3 vulnerability
SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the "FX SAP R/3 gwrd vuln."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4815?
CVE-2005-4815 is considered critical as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2005-4815?
To mitigate CVE-2005-4815, update your SAP software to the appropriate patch level as specified by SAP.
Which SAP versions are affected by CVE-2005-4815?
CVE-2005-4815 affects SAP versions 6.4 before patch 4, 6.2 before patch 1364, 4.6 before patch 1767, 45 before patch 913, 40 before patch 1008, and 31 before patch 735.
What causes the vulnerability in CVE-2005-4815?
CVE-2005-4815 is caused by improper restriction of process execution by lnaxdm/sapsys, allowing unauthorized code execution.
Can CVE-2005-4815 be exploited remotely?
Yes, CVE-2005-4815 can be exploited remotely, potentially allowing attackers to gain control of the affected systems.