CVE:CVE-2005-4815
CNNVD:CNNVD-200512-794
SAP 6.4的6.40补丁4之前版本、6.2的6.20补丁1364之前版本、4.6的4.6D补丁1767之前版本、45的45B补丁913之前版本、40的40B补丁1008之前版本和31的31I补丁735之前版本未能正确地限制lnaxdm/sapsys的进程执行权，远程攻击者可通过特定的、以本地可执行文件名结尾的UDP包来执行任意代码，又称为"FX SAP R/3 gwrd vuln"。
solution:Upgrade sap sap_r_3 to a higher version than 4.6_before_patch_1767,6.2_before_patch_1364,6.4_before_patch_4,31_before_31i_patch_735,40_before_patch_1008,45_before_patch_913,and avoid the version 4.6_before_patch_1767,6.2_before_patch_1364,6.4_before_patch_4,31_before_31i_patch_735,40_before_patch_1008,45_before_patch_913