Lucene search

[email protected]CVE-2003-1036

HistoryApr 15, 2004 - 4:00 a.m.

CVE-2003-1036

2004-04-1504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sap

agate

its

buffer overflows

cve-2003-1036

security vulnerability

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%

JSON

Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.

CPENameOperatorVersion
sap:internet_transaction_serversap internet transaction serverle6.20_pl7
sap:internet_transaction_serversap internet transaction serverle4.6_pl463
sap:internet_transaction_serversap internet transaction serverle6.10_pl30

CPE	Name	Operator	Version
sap:internet_transaction_server	sap internet transaction server	le	6.20_pl7
sap:internet_transaction_server	sap internet transaction server	le	4.6_pl463
sap:internet_transaction_server	sap internet transaction server	le	6.10_pl30

References

www.phenoelit.de/stuff/Phenoelit20c3.pd

exchange.xforce.ibmcloud.com/vulnerabilities/14186

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%

JSON