Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Security Note, Information, SAP IGS system stabilization, SAP security note 968423

SAP Note 968423
SAP Security Note
HotNews

SAP security note 968423, "Security Note, Information, SAP IGS system stabilization", is a program error note released on 08.10.2009. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBC-FES-IGS
CategoryProgram error
PriorityHotNews
TypeSAP Security Note
Version1
StatusReleased for Customer
Released on08.10.2009
LanguageEnglish

Description

Symptom

IGS crashes when using HTTP.

Solution

Please install IGS 6.40 patch ≥ 16 or IGS 7.00 ≥ 4.

Reason and prerequisites

You enabled the HTTP listener of the IGS. In some cases, it is possible to crash the IGS by using malformed HTTP requests.

References

Affected components

  • BC-FES-IGS 6.40
  • BC-FES-IGS 7.00

Full note on SAP: SAP Support Launchpad note 968423

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More