Details of VAR-201301-0447

ID

VAR-201301-0447

TITLE

SAP NetWeaver SDM Multiple Security Vulnerabilities

Trust: 0.9

sources: BID: 57523 // CNNVD: CNNVD-201301-502

DESCRIPTION

SAP NetWeaver is the technical foundation for SAP Business Suite solutions, SAP xApps composite applications, partner solutions, and custom applications. The SAP NetWeaver SDM service has an unspecified error that allows an attacker to exploit a vulnerability to bypass authentication and perform restricted operations. SAP NetWeaver is prone to multiple security vulnerabilities. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: SAP NetWeaver SDM Multiple Vulnerabilities SECUNIA ADVISORY ID: SA51740 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/51740/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=51740 RELEASE DATE: 2013-01-23 DISCUSS ADVISORY: http://secunia.com/advisories/51740/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/51740/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=51740 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: ERPScan has reported multiple vulnerabilities in SAP NetWeaver, which can be exploited by malicious people to disclose certain sensitive information, bypass certain security restrictions, and cause a DoS (Denial of Service). SOLUTION: Apply SAP Note 1724516. PROVIDED AND/OR DISCOVERED BY: Alexander Polyakov, ERPScan. ORIGINAL ADVISORY: SAP: https://service.sap.com/sap/support/notes/1724516 ERPScan (DSECRG-12-044, DSECRG-12-045, DSECRG-12-046, DSECRG-12-047, DSECRG-12-048): http://erpscan.com/advisories/dsecrg-12-044-sap-netweaver-sdm-authentication-bypass/ http://erpscan.com/advisories/dsecrg-12-045-sap-netweaver-sdm-denial-of-service/ http://erpscan.com/advisories/dsecrg-12-046-sap-netweaver-sdm-information-disclosure-and-smbrelay/ http://erpscan.com/advisories/dsecrg-12-047-sap-netweaver-sdm-admin-information-disclosure/ http://erpscan.com/advisories/dsecrg-12-048-sap-netweaver-sdm-admin-dos/ OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 3.96

sources: CNVD: CNVD-2013-00534 // CNVD: CNVD-2013-00529 // CNVD: CNVD-2013-00531 // CNVD: CNVD-2013-00527 // CNVD: CNVD-2013-00532 // BID: 57523 // IVD: d040cf88-1f3a-11e6-abef-000c29c66e3d // IVD: c0d6ce62-1f3a-11e6-abef-000c29c66e3d // IVD: c30432ce-1f3a-11e6-abef-000c29c66e3d // IVD: bbf8d5a2-1f3a-11e6-abef-000c29c66e3d // IVD: c9309bba-1f3a-11e6-abef-000c29c66e3d // PACKETSTORM: 119745

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 4.0

sources: IVD: d040cf88-1f3a-11e6-abef-000c29c66e3d // IVD: c0d6ce62-1f3a-11e6-abef-000c29c66e3d // IVD: c30432ce-1f3a-11e6-abef-000c29c66e3d // IVD: bbf8d5a2-1f3a-11e6-abef-000c29c66e3d // IVD: c9309bba-1f3a-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-00534 // CNVD: CNVD-2013-00529 // CNVD: CNVD-2013-00531 // CNVD: CNVD-2013-00527 // CNVD: CNVD-2013-00532

AFFECTED PRODUCTS

vendor:	sap	model:	netweaver	scope:	eq	version:	7.x	Trust: 4.0
vendor:	sap	model:	netweaver	scope:	eq	version:	7.30	Trust: 0.3
vendor:	sap	model:	netweaver	scope:	eq	version:	7.10	Trust: 0.3
vendor:	sap	model:	netweaver	scope:	eq	version:	7.02	Trust: 0.3
vendor:	sap	model:	netweaver	scope:	eq	version:	7.01	Trust: 0.3
vendor:	sap	model:	netweaver	scope:	eq	version:	7.0	Trust: 0.3

CVSS

SEVERITY

CVSSV2

CVSSV3

IVD:	d040cf88-1f3a-11e6-abef-000c29c66e3d
value:	MEDIUM
Trust: 0.2
IVD:	c0d6ce62-1f3a-11e6-abef-000c29c66e3d
value:	MEDIUM
Trust: 0.2
IVD:	c30432ce-1f3a-11e6-abef-000c29c66e3d
value:	MEDIUM
Trust: 0.2
IVD:	bbf8d5a2-1f3a-11e6-abef-000c29c66e3d
value:	MEDIUM
Trust: 0.2
IVD:	c9309bba-1f3a-11e6-abef-000c29c66e3d
value:	MEDIUM
Trust: 0.2

IVD:	d040cf88-1f3a-11e6-abef-000c29c66e3d
severity:	NONE
baseScore:	NONE
vectorString:	NONE
accessVector:	NONE
accessComplexity:	NONE
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	UNKNOWN
Trust: 0.2
IVD:	c0d6ce62-1f3a-11e6-abef-000c29c66e3d
severity:	NONE
baseScore:	NONE
vectorString:	NONE
accessVector:	NONE
accessComplexity:	NONE
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	UNKNOWN
Trust: 0.2
IVD:	c30432ce-1f3a-11e6-abef-000c29c66e3d
severity:	NONE
baseScore:	NONE
vectorString:	NONE
accessVector:	NONE
accessComplexity:	NONE
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	UNKNOWN
Trust: 0.2
IVD:	bbf8d5a2-1f3a-11e6-abef-000c29c66e3d
severity:	NONE
baseScore:	NONE
vectorString:	NONE
accessVector:	NONE
accessComplexity:	NONE
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	UNKNOWN
Trust: 0.2
IVD:	c9309bba-1f3a-11e6-abef-000c29c66e3d
severity:	NONE
baseScore:	NONE
vectorString:	NONE
accessVector:	NONE
accessComplexity:	NONE
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	UNKNOWN
Trust: 0.2

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201301-502

TYPE

Information leakage

Trust: 0.4

sources: IVD: c0d6ce62-1f3a-11e6-abef-000c29c66e3d // IVD: c30432ce-1f3a-11e6-abef-000c29c66e3d

PATCH

title:	Patch for SAP NetWeaver SDM Admin Denial of Service Vulnerability	url:	https://www.cnvd.org.cn/patchinfo/show/31571	Trust: 0.6
title:	Patch for SAP NetWeaver SDM Denial of Service Vulnerability	url:	https://www.cnvd.org.cn/patchinfo/show/31512	Trust: 0.6
title:	SAP NetWeaver SDM Information Disclosure Patch for SMBRelay Attack Vulnerability	url:	https://www.cnvd.org.cn/patchinfo/show/31531	Trust: 0.6
title:	SAP NetWeaver SDM verifies patches that bypass vulnerabilities	url:	https://www.cnvd.org.cn/patchinfo/show/31493	Trust: 0.6
title:	Patch for SAP NetWeaver SDM Admin Information Disclosure Vulnerability	url:	https://www.cnvd.org.cn/patchinfo/show/31532	Trust: 0.6

sources: CNVD: CNVD-2013-00534 // CNVD: CNVD-2013-00529 // CNVD: CNVD-2013-00531 // CNVD: CNVD-2013-00527 // CNVD: CNVD-2013-00532

EXTERNAL IDS

db:	BID	id:	57523	Trust: 3.9
db:	SECUNIA	id:	51740	Trust: 3.1
db:	CNVD	id:	CNVD-2013-00527	Trust: 0.8
db:	CNVD	id:	CNVD-2013-00532	Trust: 0.8
db:	CNVD	id:	CNVD-2013-00531	Trust: 0.8
db:	CNVD	id:	CNVD-2013-00534	Trust: 0.8
db:	CNVD	id:	CNVD-2013-00529	Trust: 0.8
db:	CNNVD	id:	CNNVD-201301-502	Trust: 0.6
db:	IVD	id:	D040CF88-1F3A-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	IVD	id:	C0D6CE62-1F3A-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	IVD	id:	C30432CE-1F3A-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	IVD	id:	BBF8D5A2-1F3A-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	IVD	id:	C9309BBA-1F3A-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	PACKETSTORM	id:	119745	Trust: 0.1

REFERENCES

url:	http://secunia.com/advisories/51740/http	Trust: 3.0
url:	http://www.securityfocus.com/bid/57523	Trust: 0.6
url:	http://www.sap.com/platform/netweaver/index.epx	Trust: 0.3
url:	http://secunia.com/advisories/51740/#comments	Trust: 0.1
url:	https://service.sap.com/sap/support/notes/1724516	Trust: 0.1
url:	http://erpscan.com/advisories/dsecrg-12-046-sap-netweaver-sdm-information-disclosure-and-smbrelay/	Trust: 0.1
url:	http://erpscan.com/advisories/dsecrg-12-047-sap-netweaver-sdm-admin-information-disclosure/	Trust: 0.1
url:	http://secunia.com/vulnerability_intelligence/	Trust: 0.1
url:	http://secunia.com/advisories/secunia_security_advisories/	Trust: 0.1
url:	https://ca.secunia.com/?page=viewadvisory&vuln_id=51740	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/	Trust: 0.1
url:	http://erpscan.com/advisories/dsecrg-12-045-sap-netweaver-sdm-denial-of-service/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/personal/	Trust: 0.1
url:	http://secunia.com/advisories/51740/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://erpscan.com/advisories/dsecrg-12-048-sap-netweaver-sdm-admin-dos/	Trust: 0.1
url:	http://secunia.com/blog/325/	Trust: 0.1
url:	http://erpscan.com/advisories/dsecrg-12-044-sap-netweaver-sdm-authentication-bypass/	Trust: 0.1
url:	http://secunia.com/advisories/about_secunia_advisories/	Trust: 0.1

CREDITS

Alexander Polyakov

Trust: 0.9

sources: BID: 57523 // CNNVD: CNNVD-201301-502

SOURCES

db:	IVD	id:	d040cf88-1f3a-11e6-abef-000c29c66e3d
db:	IVD	id:	c0d6ce62-1f3a-11e6-abef-000c29c66e3d
db:	IVD	id:	c30432ce-1f3a-11e6-abef-000c29c66e3d
db:	IVD	id:	bbf8d5a2-1f3a-11e6-abef-000c29c66e3d
db:	IVD	id:	c9309bba-1f3a-11e6-abef-000c29c66e3d
db:	CNVD	id:	CNVD-2013-00534
db:	CNVD	id:	CNVD-2013-00529
db:	CNVD	id:	CNVD-2013-00531
db:	CNVD	id:	CNVD-2013-00527
db:	CNVD	id:	CNVD-2013-00532
db:	BID	id:	57523
db:	PACKETSTORM	id:	119745
db:	CNNVD	id:	CNNVD-201301-502

LAST UPDATE DATE

2022-05-17T01:45:26+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2013-00534	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00529	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00531	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00527	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00532	date:	2013-01-25T00:00:00
db:	BID	id:	57523	date:	2013-01-23T00:00:00
db:	CNNVD	id:	CNNVD-201301-502	date:	2013-01-25T00:00:00

SOURCES RELEASE DATE

db:	IVD	id:	d040cf88-1f3a-11e6-abef-000c29c66e3d	date:	2013-01-25T00:00:00
db:	IVD	id:	c0d6ce62-1f3a-11e6-abef-000c29c66e3d	date:	2013-01-25T00:00:00
db:	IVD	id:	c30432ce-1f3a-11e6-abef-000c29c66e3d	date:	2013-01-25T00:00:00
db:	IVD	id:	bbf8d5a2-1f3a-11e6-abef-000c29c66e3d	date:	2013-01-25T00:00:00
db:	IVD	id:	c9309bba-1f3a-11e6-abef-000c29c66e3d	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00534	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00529	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00531	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00527	date:	2013-01-25T00:00:00
db:	CNVD	id:	CNVD-2013-00532	date:	2013-01-25T00:00:00
db:	BID	id:	57523	date:	2013-01-23T00:00:00
db:	PACKETSTORM	id:	119745	date:	2013-01-23T05:44:45
db:	CNNVD	id:	CNNVD-201301-502	date:	2013-01-25T00:00:00