Potential remote code execution in SAP HANA Extended Application Services (XS), SAP security note 2197397

SAP security note 2197397, "Potential remote code execution in SAP HANA Extended Application Services (XS)", is a note released on 08.09.2015. Below are the symptom and SAP recommended solution.

Description

Symptom

Attackers could exploit SAP HANA Extended Application Services to enable them to take complete control of the product, including viewing, changing, or deleting data.

Solution

The issue is fixed with revision 92 (for SPS09) and 85.05 (for SPS08). SPS10 is not affected. Update to these or later revisions.

Workaround: Restrict access to SAP HANA Extended Application Services (XS) by limiting network access to the SAP HANA Extended Application Services network ports of the HANA server.

Reason and prerequisites

A buffer overflow vulnerability exists in some revisions of the SAP HANA Extended Application Services. If an attacker has network access to the HTTP interface of SAP HANA Extended Application Services, the vulnerability might enable an attacker to inject code into the working memory that is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.

CVSS

Score 9.3 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C