SAP Note 705923
SAP Security Note
High priority
SAP Security Note
High priority
SAP security note 705923, "Security: OKCode field: Buffer overrun", is a note released on 08.10.2009. Below are the symptom and the SAP recommended solution.
Description
Symptom
If you enter more than 500 characters into the OKCode field of the SAPGUI for HTML, the AGate crashes.
Solution
Install the current version of the ITS.
Reason and prerequisites
This is caused by a program error, which occurs in the ITS 620 Patch Level lower than 9 and ITS 610 Patch Level less than 32.
Full note on SAP: SAP Support Launchpad note 705923
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
