PT-2014-3997 · Sap · Saprouter

Fernando Miranda + 1 · Publicado 2014-04-17 · Atualizado 2018-10-10 · CVE-2014-0984

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Router versions prior to 721 patch 118 SAP Router versions prior to 720 patch 412 SAP Router versions prior to 710 patch 030

Description The issue allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, also known as a timing side-channel attack. This occurs because the passwordCheck function terminates validation of a Route Permission Table entry password upon encountering the first incorrect character.

Recommendations For SAP Router version 721 patch 117 and earlier, update to version 721 patch 118 or later. For SAP Router version 720 patch 411 and earlier, update to version 720 patch 412 or later. For SAP Router version 710 patch 029 and earlier, update to version 710 patch 030 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-0984

Produtos afetados

Saprouter

Referências · 7

• 🔥 http://exploit-db.com/exploits/32919 · Exploit
• 🔥 https://exploit-db.com/exploits/32919 · Exploit
• http://scn.sap.com/docs/DOC-8218 · Nota
• http://coresecurity.com/advisories/sap-router-password-timing-attack · Nota
• https://service.sap.com/sap/support/notes/1986895 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0984 · Nota de Segurança
• http://securityfocus.com/archive/1/531854/100/0/threaded · Nota