CVE-2007-1918: Medium severity IBM Racf vulnerability
The RFCSETREGSERVERPROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a denial of service (client lockout) via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1918?
CVE-2007-1918 is classified as a denial of service vulnerability that affects specific versions of the SAP RFC Library.
How do I fix CVE-2007-1918?
To mitigate CVE-2007-1918, upgrade to a patched version of the SAP RFC Library released after January 9, 2007.
What systems are affected by CVE-2007-1918?
CVE-2007-1918 specifically affects SAP RFC Library versions 6.40 and 7.00 prior to January 9, 2007.
Can CVE-2007-1918 allow attackers to take control of my system?
No, CVE-2007-1918 does not allow attackers to take control of the system but could result in denial of service through client lockout.
What are the consequences of CVE-2007-1918 exploitation?
Exploitation of CVE-2007-1918 can lead to service interruptions by locking clients out of the RFC server.