CVE-2014-0995 The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the....
MediumCVSS 5.0
EPSS 10.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver | <= 7.01 | No fix listed |
| sap netweaver | = 7.20 | No fix listed |
References
- blog.onapsis.com third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20141016 [CORE-2014-0007] -SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability exploit mailing-list third-party-advisory
- 60950 third-party-advisory
- www.coresecurity.com exploit third-party-advisory
- 20141016 [CORE-2014-0007] -SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability mailing-list third-party-advisory vdb-entry
- netweaver-trace-pattern-dos(97610) third-party-advisory vdb-entry
- twitter.com broken-link