The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a denial of service (client lockout) via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
References
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 00:29
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/24722 - Vendor Advisory | |
References | () http://securityreason.com/securityalert/2540 - | |
References | () http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_SET_REG_SERVER_PROPERTY_RFC_Function_Denial_of_Service.pdf - | |
References | () http://www.securityfocus.com/archive/1/464685/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/23309 - | |
References | () http://www.vupen.com/english/advisories/2007/1270 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/33418 - |
Information
Published : 2007-04-10 23:19
Updated : 2024-11-21 00:29
NVD link : CVE-2007-1918
Mitre link : CVE-2007-1918
CVE.ORG link : CVE-2007-1918
JSON object : View
Products Affected
linux
- linux_kernel
apple
- macos
ibm
- aix
- racf
- os_400
hp
- tru64
- hp-ux
siemens
- reliant_unix
sun
- solaris
sap
- rfc_library
microsoft
- windows_server
CWE