HotNews
SAP security note 1649838, "Potential Remote Code Execution in SAP Message Server", was released on February 14, 2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A critical buffer overflow vulnerability has been identified in the SAP Message Server, allowing attackers to execute remote code. This vulnerability could lead to full system compromise, including data manipulation and service interruption.
An attacker exploiting this vulnerability can gain complete control over the SAP system, view, change, or delete data, and even cause the SAP Message Server to terminate.
Solution
To mitigate this vulnerability, install the specified patch level for the SAP Message Server as outlined in SAP Note 1649838. It is highly recommended to apply the patch promptly to secure your SAP system. Additionally, conduct a thorough risk assessment tailored to your environment and system configuration.
CVSS
Score 6.8 Vector: AV:N/AC:M/AU:N/C:P/I:P/A:P
Affected components
- SAP KERNEL: various versions ranging from 4.6DEXT to 8.03 are affected.
Full note on SAP: SAP Support Launchpad note 1649838
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].