Potential remote code execution in spool., SAP security note 2061271

SAP Note 2061271
SAP Security Note
High priority

SAP security note 2061271, "Potential remote code execution in spool", is a program error note released on 09.12.2014. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > Computer Center Management System (CCMS) > Print and Output Management > Spool System

CategoryProgram error

PriorityHigh priority

TypeSAP Security Note

Version4

StatusReleased for Customer

Released on09.12.2014

LanguageEnglish

Description

Symptom

An attacker can exploit spool to enable them to take complete control of the product, including viewing, changing, or deleting data.

Solution

Please apply the kernel patch level (disp+work package) mentioned in this SAP Note.

Reason and prerequisites

A buffer overflow vulnerability exists in spool. This enables an attacker to inject code into the working memory that is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.

CVSS

Score 7.5 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:C

Affected components

SAP KERNEL 7.42 64-BIT UNICODE: SP023-000023
SAP KERNEL 7.42 64-BIT: SP023-000023
SAP KERNEL 7.41 64-BIT: SP110-000110
SAP KERNEL 7.41 64-BIT UNICODE: SP110-000110
SAP KERNEL 7.20 EXT 64-BIT UC: SP710-000710

Full note on SAP: SAP Support Launchpad note 2061271

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Buffer Overflow #RCE #Remote Code Execution #BC-CCM-PRN