SAP security note 1481924, "Potential remote code execution in RFC lib". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
This security note has been updated. For more detailed information, see Security Note 1523254.
A malicious user can exploit a memory corruption in the RFC library and take complete control of the product, including viewing, changing, or deleting data.
Solution
Install a new version of the RFC library on your computer. Versions 7.00 and 7.01 are not susceptible to this problem. For more information, see Note 1445409.
Reason and prerequisites
You are using RFC SDK Versions 6.40, 7.10, 7.11, or 7.20. In these versions, buffer overflows may occur in the address space of the process due to insufficient checks of interface parameters. Actual attack scenarios are known only for the SAPLogon ActiveX control.
References
- Security Note 1523254 – Update #1 to Security Note 1481924
- Procedure for security problem using RFC Lib or RFC SDK (Note 1445409)
Affected components
Full note on SAP: SAP Support Launchpad note 1481924
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
