SAP MaxDB Malformed Handshake Request Remote Code Execution

No description provided by source. !/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.comhttp://sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying 172.16.29.133...

SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP MaxDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the serv.exe process which listens by default on TCP port 7210. The process trusts a value...