medium5.0Public exploit code
CVE-2003-0747
wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory struct…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure2003-08-30 · remote · multiple · Verified
Impact
wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Internet Transaction Server | Version 4620.2.0.323011 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html
- http://www.securityfocus.com/bid/8515
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13063
- http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html
- http://www.securityfocus.com/bid/8515
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13063