Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Potential information disclosure relating to SAP Sybase ASE, SAP security note 1887341

SAP Note 1887341
SAP Security Note
High priority

SAP security note 1887341, "Potential information disclosure relating to SAP Sybase ASE", is a program error note released on September 10, 2013. Below are the symptom and SAP recommended solution.

ComponentBC-SYB-ASE (Basis Components > Sybase Products > Sybase ASE Database Platform (non Business Suite))
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version4
StatusReleased for Customer
Released onSeptember 10, 2013
LanguageEnglish

Description

Symptom

An attacker can use functions of SAP Sybase ASE to discover information about the system running the SAP Sybase ASE server. This information may be used by an attacker to further target SAP Sybase ASE.

Solution

This issue has been fixed in the following SAP Sybase ASE versions:

  • SAP Sybase ASE 15.7 SP100
  • SAP Sybase ASE 15.7 ESD#4.2
  • SAP Sybase ASE 15.5 ESD#5.3
  • SAP Sybase ASE 15.0.3 ESD#4.3

Install the fixed SAP Sybase ASE versions most appropriate for your production environments.

Reason and prerequisites

Information in protected files on machines running SAP Sybase ASE may be disclosed to an attacker. This information may be used by the attacker to further target specialized attacks on the system.

CVSS

Score 6.8 Vector: AV:N/AC:L/AU:S/C:P/I:N/A:N

Full note on SAP: SAP Support Launchpad note 1887341

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Information disclosure #SAP Sybase ASE

Explore More