CVE-2003-0748: Medium severity SAP Internet Transaction Server vulnerability
Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space characters, which can prevent SAP from effectively adding a .html extension to the filename.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0748?
CVE-2003-0748 has a medium severity rating due to its potential to allow unauthorized file access.
How do I fix CVE-2003-0748?
To fix CVE-2003-0748, you should apply patches provided by SAP for Internet Transaction Server version 4620.2.0.323011.
What systems are affected by CVE-2003-0748?
CVE-2003-0748 affects SAP Internet Transaction Server version 4620.2.0.323011.
What type of vulnerability is CVE-2003-0748?
CVE-2003-0748 is a directory traversal vulnerability, allowing remote attackers to read arbitrary files.
Can CVE-2003-0748 be exploited remotely?
Yes, CVE-2003-0748 can be exploited remotely by manipulating the ~theme and ~template parameters.