CVE-2014-6283

Severity

65%

Complexity

80%

Confidentiality

106%

SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 before ESD#4.4 does not properly restrict access, which allows remote authenticated database users to (1) overwrite the master encryption key or (2) trigger a buffer overflow via a crafted RPC message to the hacmpmsgxchg function, and possibly other vectors.

SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 before ESD#4.4 does not properly restrict access, which allows remote authenticated database users to (1) overwrite the master encryption key or (2) trigger a buffer overflow via a crafted RPC message to the hacmpmsgxchg function, and possibly other vectors.

CVSS 2.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:P).

Overview

Type

Sybase Adaptive Server Enterprise

First reported 10 years ago

2014-10-17 23:55:00

Last updated 7 years ago

2017-09-08 01:29:00

Affected Software

Sybase Adaptive Server Enterprise 15.0.3

15.0.3

Sybase Adaptive Server Enterprise 15.5

15.5

Sybase Adaptive Server Enterprise 15.7

15.7

References

http://blog.spiderlabs.com/2014/09/cve-2014-6283-sap-ase-missing-authorization-checks-and-arbitrary-code-execution.html

Exploit, Third Party Advisory

http://scn.sap.com/docs/DOC-55451

Vendor Advisory

61238

sap-ase-cve20146283-priv-esc(99935)

https://service.sap.com/sap/support/notes/2044220

Permissions Required, Vendor Advisory

https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-013.txt

Exploit, Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.