SAP Security Note
High priority
SAP security note 1440772, "Potential denial of service in SRM-EBP-CA-ATT", is a note released on May 10, 2011. Below are the symptom and SAP recommended solution.
Description
Symptom
A malicious user can remotely exploit SRM-EBP-CA-ATT, rendering it, and potentially the resources that are used to serve SRM-EBP-CA-ATT, unavailable.
A malicious user can trigger a condition in which the process enters an infinite loop, causing it to consume all of the available processing time. This causes the entire machine to become unresponsive until the process is terminated manually. An malicious user can use this flaw to launch a denial of service (DoS) attack.
Solution
Please implement the attached correction instructions or import the corresponding support package.
CVSS
Score 0
Full note on SAP: SAP Support Launchpad note 1440772
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
