CVEvulnerability

CVE-2007-3614

7.5 HIGH Published 2007-07-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other unspecified vectors related to "numerous other fields."

Affected configurations

• sap sap db 7.3.00 • sap sap db 7.3.29 • sap sap db 7.4 • sap sap db 7.4.3 • sap sap db 7.4.3.7 beta • sap sap db 7.4.03.29 • sap sap db 7.4.03.30 • sap sap db 7.5

References