SAP security note 2063369, "Potential remote code execution in profile maintenance". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An attacker can exploit functions of profile maintenance to enable them to take complete control of the product, including viewing, changing, or deleting data.
Solution
The kernel now validates null pointer exceptions. Please apply the Support Package mentioned in this SAP Note for disp+work.exe.
Reason and prerequisites
A buffer overflow vulnerability exists in profile maintenance. This enables an attacker to inject code into the working memory that is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.
CVSS
Score 7.5 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:C
References
Affected components
- KRNL32NUC 7.20 – 7.43
- KRNL32UC 7.20 – 7.43
- KRNL64NUC 7.20 – 7.43
- KRNL64UC 7.20 – 7.43
- KERNEL 7.20 – 7.43
Full note on SAP: SAP Support Launchpad note 2063369
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
