CVE-2007-3614: Buffer Overflow
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwaGetQueryString; and other unspecified vectors related to "numerous other fields."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3614?
CVE-2007-3614 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-3614?
To mitigate CVE-2007-3614, upgrade SAP DB to a version that does not contain this vulnerability.
What software is affected by CVE-2007-3614?
CVE-2007-3614 affects SAP DB versions 7.3 through 7.5, including specific versions like 7.3.00 and 7.4.3.7_beta.
What type of attack does CVE-2007-3614 facilitate?
CVE-2007-3614 facilitates stack-based buffer overflow attacks that can be exploited to execute arbitrary code.
Are there any known exploits for CVE-2007-3614?
Yes, CVE-2007-3614 has known exploitation vectors related to cookie values and additional parameters in requests.