SAP NetWeaver Composition Environment 'sapstartsrv.exe' Remote Code Execution Vulnerability
BID:44731
Info
SAP NetWeaver Composition Environment 'sapstartsrv.exe' Remote Code Execution Vulnerability
| Bugtraq ID: | 44731 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2010 12:00AM |
| Updated: | Nov 08 2010 12:00AM |
| Credit: | AbdulAziz Hariri |
| Vulnerable: |
SAP NetWeaver Nw04 SP18 |
| Not Vulnerable: | |
Discussion
SAP NetWeaver Composition Environment 'sapstartsrv.exe' Remote Code Execution Vulnerability
SAP NetWeaver Composition Environment is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with user-level privileges. Failed exploit attempts will result in a denial-of-service condition.
SAP NetWeaver Composition Environment is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with user-level privileges. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
SAP NetWeaver Composition Environment 'sapstartsrv.exe' Remote Code Execution Vulnerability
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SAP NetWeaver Composition Environment 'sapstartsrv.exe' Remote Code Execution Vulnerability
Solution:
The vendor released updates to address this issue. Please contact the vendor for more information.
Solution:
The vendor released updates to address this issue. Please contact the vendor for more information.
References
SAP NetWeaver Composition Environment 'sapstartsrv.exe' Remote Code Execution Vulnerability
References:
References: