SAP MaxDB Unspecified Information Disclosure and Denial of Service Vulnerabilities
BID:37766
Info
SAP MaxDB Unspecified Information Disclosure and Denial of Service Vulnerabilities
| Bugtraq ID: | 37766 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 13 2010 12:00AM |
| Updated: | Jan 13 2010 12:00AM |
| Credit: | Intevydis |
| Vulnerable: |
SAP MaxDB 7.6.6 |
| Not Vulnerable: | |
Discussion
SAP MaxDB Unspecified Information Disclosure and Denial of Service Vulnerabilities
SAP MaxDB is prone to an unspecified information-disclosure vulnerability and an unspecified denial-of-service vulnerability.
Very few details are currently available regarding these issues. We will update this BID as more information emerges.
Attackers can exploit these issues to a cause a denial-of-service condition or obtain sensitive information.
SAP MaxDB 7.6.06 is vulnerable; other versions any also be affected.
SAP MaxDB is prone to an unspecified information-disclosure vulnerability and an unspecified denial-of-service vulnerability.
Very few details are currently available regarding these issues. We will update this BID as more information emerges.
Attackers can exploit these issues to a cause a denial-of-service condition or obtain sensitive information.
SAP MaxDB 7.6.06 is vulnerable; other versions any also be affected.
Exploit / POC
SAP MaxDB Unspecified Information Disclosure and Denial of Service Vulnerabilities
A working commercial exploit is available through the Intevydis VulnDisco package. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through the Intevydis VulnDisco package. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
SAP MaxDB Unspecified Information Disclosure and Denial of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
SAP MaxDB Unspecified Information Disclosure and Denial of Service Vulnerabilities
References:
References:
- SAP MaxDB Homepage (SAP)
- VulnDisco Pack Professional (Intevydis)