CVE-2017-16689

A Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EXT, 7.22, 7.22EXT; SAP KERNEL from 7.21 to 7.22, 7.45, 7.49, can be established to a different client or a different user on the same system, although no explicit Trusted/Trusting...

CVE-2017-16689

A Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EXT, 7.22, 7.22EXT; SAP KERNEL from 7.21 to 7.22, 7.45, 7.49, can be established to a different client or a different user on the same system, although no explicit Trusted/Trusting...

CVE-2017-16679

URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site...

CVE-2017-16679

URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site...

CVE-2017-16689

A Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EXT, 7.22, 7.22EXT; SAP KERNEL from 7.21 to 7.22, 7.45, 7.49, can be established to a different client or a different user on the same system, although no explicit Trusted/Trusting...

CVE-2017-16679

CVE-2017-16679 describes a URL redirection vulnerability in SAP Startup Service within SAP Kernel variants (32/64 NUC/Unicode) and multiple kernel versions (7.21, 7.21EXT, 7.22, 7.22EXT, 7.45, 7.49, 7.52). The underlying issue is a vulnerable redirect mechanism that allows an attacker to lead use...

CVE-2017-16679: URL Redirection to Untrusted Site

URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site...

CVE-2017-16689: Improper Authentication

A Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EXT, 7.22, 7.22EXT; SAP KERNEL from 7.21 to 7.22, 7.45, 7.49, can be established to a different client or a different user on the same system, although no explicit Trusted/Trusting...

SAP KERNEL Trusted RFC connection security bypass vulnerability

SAP KERNEL is a set of basic technology platforms written in C from SAP in Germany. The platform is a support platform between the underlying layer and the business layer.32 NUC and so on are different versions of it.Trusted RFC connection is one of the RFC connection components. A security...

SAP SAPCAR Buffer Overflow Vulnerability

SAP SAPCAR is a set of compression and decompression tools for use in SAP Kernel. A buffer overflow vulnerability exists in SAP SAPCAR. An attacker could exploit this vulnerability to perform unauthorized operations in the context of an affected application...

SAP KERNEL SAP Message Server HTTP Daemon Denial of Service Vulnerability

SAP KERNEL is a set of basic technology platforms written in the C language. A security vulnerability in SAP KERNEL's SAP Message Server HTTP daemon can be exploited by remote attackers to submit a special request that could crash the application...

CVE-2017-5997

The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service memory consumption and process crash via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972...

CVE-2017-5997

The CVE-2017-5997 issue affects SAP Kernel’s Message Server HTTP daemon (SAP Kernel versions 7.21–7.49). The root cause is improper memory/resource handling when processing requests with a group parameter sized between 4 KB and 65 KB, which can lead to memory exhaustion and a denial of service (p...

CVE-2017-5997: Missing Release of Resource after Effective Lifetime

The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service memory consumption and process crash via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972...

SAP NetWeaver KERNEL 7.0 7.5 - Denial of Service

SAP NetWeaver KERNEL 7.0 7.5 - Denial of Service ''' Application: SAP NetWeaver KERNEL Versions Affected: SAP NetWeaver KERNEL 7.0-7.5 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 09.03.2016 Reported: 10.03.2016 Vendor response: 10.03.2016 Date of Public Advisory: 12.07.2016 Reference...

SAP NetWeaver - buffer overflow vulnerability

Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.0-7.5 Vendor URL: SAP Bugs: buffer overflow Reported: 09.03.2016 Vendor response: 10.03.2016 Date of Public Advisory: 12.07.2016 Reference: SAP Security Note 2295238 Author: Dmitry Yudin ERPScan VULNERABILITY INFORMATION Class: Denial ...

SAP Message Server HTTP remote DoS

Application: SAP KERNEL Versions Affected: SAP KERNEL 7.21-7.49 Vendor URL: SAP Bugs: Denial of Service Reported: 18.08.2016 Vendor response: 19.08.2016 Date of Public Advisory: 08.11.2016 Reference: SAP Security Note 2358972 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: Denial of...

SAP SAPCAR Local Lift Vulnerability (CNVD-2016-06364)

SAP SAPCAR is a set of compression and decompression tools for use in SAP Kernel. A security vulnerability exists in SAP SAPCAR that allows a local attacker to exploit the vulnerability to elevate privileges...

[ERPSCAN-15-003] SAP NetWeaver Dispatcher Buffer Overflow - RCE, DoS

ERPSCAN Research Advisory ERPSCAN-15-003 SAP NetWeaver Dispatcher Buffer Overflow - RCE, DoS Application: SAP NetWeaver Dispatcher Versions Affected: SAP NetWeaver Dispatcher, probably others Vendor URL: http://SAP.com Bugs: RCE Sent: 25.08.14 Reported: 25.08.14 Vendor response: 25.08.14 Date of...

SAP KERNEL NetWeaver Dispatcher Buffer Overflow Vulnerability

SAP's Kernel, written mainly in C, forms the basic technical platform of SAP. A buffer overflow vulnerability exists in the CSAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL, which could be exploited by a remote attacker to conduct a denial of service or arbitrary code attack...