SAP Note 1170353
SAP Security Note
Medium priority
SAP Security Note
Medium priority
SAP security note 1170353, "Security update: SAP Web Dispatcher", is a program error note released on October 8, 2009. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The SAP Web Dispatcher crashes due to "Denial of Service" attacks.
Solution
You must use the following patch level (or above) of the SAP Web Dispatcher:
- SAP_BASIS 640: Patch 236
- SAP_BASIS 700: Patch 163
- SAP_BASIS 710: Patch 108
In this case, you must pay particular attention to Note 1224599.
Reason and prerequisites
Due to a certain sequence of special requests, the SAP Web Dispatcher may crash.
References
This note refers to
Affected components
- SAP_BASIS: From 640 To 640
- SAP_BASIS: From 700 To 700
Full note on SAP: SAP Support Launchpad note 1170353
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
