Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Security buffer overun, random numbers, ~session cookie, SAP security note 678523

SAP Note 678523
SAP Security Note
High priority

SAP security note 678523, “Security: buffer overun, random numbers, ~session cookie”, is a program error note released on 08.10.2009. Below are the symptom and SAP recommended solution.

ComponentBasis Components > Frontend Services (SAP Note 1322184) > SAP Internet Transaction Server
CategoryProgram error
PriorityHigh priority
TypeSAP Security Note
Version4
StatusReleased for Customer
Released on08.10.2009
LanguageEnglish

Description

Symptom

This patch solves buffer overuns that may be deliberately triggered by a modification of the ITS URL (if you specify parameters that are too long, for example).

Solution

  • ITS 620: this problem is solved with patch level 7.
  • For 610/46D, see note 678526.

CVSS

Score 0

References

Full note on SAP: SAP Support Launchpad note 678523

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#SAP Internet Transaction Server #Frontend Services #Buffer Overflow

Explore More