Potential remote code execution in Message Server, SAP security note 1800603

SAP security note 1800603, “Potential remote code execution in Message Server”, is a program error note released on 17.12.2014. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

This security note has been updated. For more detailed information, see Security Note 2074889.

An attacker can exploit the message server to enable them to take complete control of the product, including viewing, changing, or deleting data.

Solution

This vulnerability is fixed with the kernel patch level assigned to this note or higher. Since the vulnerability affects only the message server, it is safe to exchange just the message server executable with the new one. For kernel releases 720 and 721, a fixed version of the SP stack kernel will be provided.

Reason and prerequisites

A buffer overflow vulnerability exists in the message server. This enables an attacker to inject code into the working memory that is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.

CVSS

Score 10.0 Vector: AV:N/AC:L/AU:N/C:C/I:C/A:C

References

Affected components

• KRNL32NUC, KRNL32UC, KRNL64NUC, KRNL64UC, KERNEL: various versions from 7.00 to 8.04