SAP Kernel Command Handling Denial Of Service Vulnerability
BID:45778
Info
SAP Kernel Command Handling Denial Of Service Vulnerability
| Bugtraq ID: | 45778 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 12 2011 12:00AM |
| Updated: | Jan 12 2011 12:00AM |
| Credit: | Onapsis Security |
| Vulnerable: |
SAP Kernel 7.20 SAP Kernel 7.11 SAP Kernel 7.01 SAP Kernel 7.00 SAP Kernel 6.40 |
| Not Vulnerable: | |
Discussion
SAP Kernel Command Handling Denial Of Service Vulnerability
SAP Kernel is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause the affected application to crash, denying service to legitimate users.
This issue affects SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20.
SAP Kernel is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause the affected application to crash, denying service to legitimate users.
This issue affects SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20.
Exploit / POC
SAP Kernel Command Handling Denial Of Service Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
SAP Kernel Command Handling Denial Of Service Vulnerability
Solution:
Vendor updates are available. Please see SAP Note 1439348 for details.
Solution:
Vendor updates are available. Please see SAP Note 1439348 for details.
References
SAP Kernel Command Handling Denial Of Service Vulnerability
References:
References:
- SAP Homepage (SAP)
- ONAPSIS-2011-001: SAP Management Console Unauthenticated Service Restart (Onapsis S.R.L)