First published: Tue Apr 10 2007(Updated: )
The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a denial of service (client lockout) via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM RACF | ||
Apple macOS | ||
HPE HP-UX | ||
HP Tru64 | ||
IBM AIX | ||
IBM OS/400 | ||
Linux Kernel | ||
Microsoft Windows Server | ||
Siemens Reliant Unix | ||
Oracle Solaris SPARC | ||
SAP RFC Library | =6.4 | |
SAP RFC Library | =7.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-1918 is classified as a denial of service vulnerability that affects specific versions of the SAP RFC Library.
To mitigate CVE-2007-1918, upgrade to a patched version of the SAP RFC Library released after January 9, 2007.
CVE-2007-1918 specifically affects SAP RFC Library versions 6.40 and 7.00 prior to January 9, 2007.
No, CVE-2007-1918 does not allow attackers to take control of the system but could result in denial of service through client lockout.
Exploitation of CVE-2007-1918 can lead to service interruptions by locking clients out of the RFC server.