critical9.8Public exploit code
CVE-2013-1592
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP NetWeaver Message Server - Multiple Vulnerabilities2013-02-17 · dos · windows · Verified
Impact
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver | Versions 7.01, 7.02, 7.30, 2004s |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities
- http://www.exploit-db.com/exploits/24511
- http://www.securityfocus.com/bid/57956
- http://www.securitytracker.com/id/1028148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82064
- https://packetstormsecurity.com/files/cve/CVE-2013-1592
- http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities
- http://www.exploit-db.com/exploits/24511
- http://www.securityfocus.com/bid/57956
- http://www.securitytracker.com/id/1028148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82064
- https://packetstormsecurity.com/files/cve/CVE-2013-1592