PT-2013-4133 · Sap · Sap Basis Communication Services

Published 2013-05-01 · Updated 2013-11-19 · CVE-2013-3063

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP BASIS Communication Services versions 4.6B through 7.30

Description The issue allows remote authenticated users to execute arbitrary commands.

Recommendations For versions 4.6B through 7.30, update to a version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2013-3063

Affected Products

Sap Basis Communication Services

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-3063 · Security Note
• https://service.sap.com/sap/support/notes/1674132 · Note
• http://scn.sap.com/docs/DOC-8218 · Note
• http://archives.neohapsis.com/archives/bugtraq/2013-04/0179.html · Note
• http://esnc.de/sap-security-audit-and-scan-services/security-advisories/39-remote-code-execution-in-sap-connect-communication-services · Note