SAP security note 1506247, “Denial of service issue in longtext”. Below are the symptom, reason and prerequisites, the SAP recommended solution and the affected software components.
Description
Symptom
A malicious user can remotely exploit SRM and render it, as well as potentially the resources that are used to serve SRM unavailable.
Solution
Please implement the following manual instructions and also implement the attached advanced corrections:
- Goto transaction SE80.
- Goto the package /SAPSRM/MV_REUSE.
- Expand class library.
- Goto the class /SAPSRM/CL_NOTES_UTILITIES.
- Right click and choose ‘Delete’ from the menu.
- Delete the object and release the transport request.
Reason and prerequisites
A malicious user can trigger a condition in which the process enters an infinite loop, which causes it to consume all available processing time. This results in the entire machine being unresponsive until the process is manually killed. An adversary can use this flaw to launch a Denial of Service (DoS) attack.
Affected components
- SAP SRM 7.01
- SAP SRM 7.0
Full note on SAP: SAP Support Launchpad note 1506247
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
