PT-2007-4869 · Sap · Sap Db

Published 2007-07-06 · Updated 2018-10-15 · CVE-2007-3614

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP DB versions 7.3 through 7.5

Description The issue is related to multiple stack-based buffer overflows in the waHTTP.exe component, also known as the SAP DB Web Server. This allows remote attackers to execute arbitrary code through various vectors, including a certain cookie value and an additional parameter related to sapdbwa GetQueryString, as well as numerous other fields.

Recommendations For SAP DB versions 7.3 through 7.5, consider restricting access to the waHTTP.exe component until a patch is available. As a temporary workaround, avoid using unspecified vectors related to numerous other fields in the SAP DB Web Server.

Exploit

Fix

Related Identifiers

CVE-2007-3614

Affected Products

Sap Db

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sapdb_webtools.rb · Exploit
• 🔥 https://exploit-db.com/exploits/30278 · Exploit
• 🔥 https://exploit-db.com/exploits/16758 · Exploit
• 🔥 https://exploit-db.com/exploits/4157 · Exploit
• 🔥 http://securityfocus.com/bid/24773 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3614 · Security Note
• http://securityfocus.com/archive/1/472891/100/0/threaded · Note
• http://secunia.com/advisories/25954 · Note
• http://ngssoftware.com/advisories/critical-risk-vulnerability-in-sap-db-web-server-stack-overflow · Note
• http://securitytracker.com/id?1018341 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35277 · Note
• http://vupen.com/english/advisories/2007/2453 · Note
• http://kb.cert.org/vuls/id/679041 · Note
• http://osvdb.org/37838 · Note
• http://securityreason.com/securityalert/2867 · Note