RULE(RULE ID:310928)

Rule General Information
Release Date: 2014-06-30
Rule Name: WEB-OTHER SAP Sybase Event Stream Processor esp_parse Connection Unsafe Pointer Dereference -4 (CVE-2014-3457)
Severity:
CVE ID:
Rule Protection Details
Description: Two unsafe pointer dereference vulnerabilities have been reported in SAP Sybase Event Stream Processor (ESP). These vulnerabilities are caused by the listening service accepting unsanitized pointers in XMLRPC requests.
Impact: Remote code execution
Affected OS: Windows, Linux
Reference: CVE-2014-3457
Solutions
Update vendor's patch.