Potential denial of service in NetWeaver application server, SAP security note 1553930

SAP security note 1553930, “Potential Denial of Service in NetWeaver Application Server”. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

A malicious user can remotely exploit the NetWeaver application server, rendering it and potentially the resources that are used to serve the NetWeaver application server unavailable. This constitutes a Denial of Service (DoS) attack.

Availability: Partial impact on availability, making the system unavailable to legitimate users.

Solution

This issue can be resolved by applying the appropriate support package. Refer to the Support Package section of the note for details on the required support package for your system version.

Alternatively, you can manually fix this issue without installing a support package by deactivating the ‘cachetest’ service:

• Go to transaction SICF.
• Locate the CACHETEST service by entering it in the filter or navigating through the service hierarchy (default_host > sap > bc).
• Right-click on the service and select Deactivate Service.

CVSS

Score 4.0 Vector: AV:N/AC:L/AU:S/C:N/I:N/A:P

References

• Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• Basis Components > Client/Server Technology > Internet Communication Manager (BC-CST-IC) – SAP_BASIS 620 to 800