Intrusion Prevention

SAP.WebAgent.Buffer.Overflow

Description

A buffer overflow in the WAECHO default service in web-tools in SAP DB, allows remote attackers to execute arbitrary code via a URL with a long requestURI

Affected Products

SAP, SAP DB, Version 7.4.03.29, and previous.

Impact

System compromise.

Recommended Actions

Upgrade to SAP DB 7.4.03.30

CVE References

CVE-2003-0944