Security Buffer overflow, SAP security note 1414112

SAP security note 1414112, "Buffer Overflow Vulnerability", is a note released on January 29, 2010. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

A stack overwrite vulnerability has been identified in the SAP kernel that can potentially be exploited remotely to execute arbitrary code with the permissions of the kernel process. An attacker exploiting this vulnerability could gain control over the SAP Web Application Server. To exploit this, the attacker must have a valid account in the SAP system. Systems with activated ICF services based on ITS are particularly vulnerable.

Solution

Apply the latest SAP kernel patch available from the SAP Service Marketplace. Given the severity of the vulnerability, it is strongly recommended to update SAP systems utilizing the integrated ITS to mitigate the risk of remote code execution.

References

• Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• SAP Kernel 6.40 32-BIT UNICODE: SP312 Patch 000312
• SAP Kernel 6.40 64-BIT UNICODE: SP312 Patch 000312
• SAP Kernel 7.00 and 7.01: Various support packages and patches as listed in the Support Package Patches