CVE-2007-3615: High severity Microsoft All Windows vulnerability

Published Jul 6, 2007

Updated

Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.

Affected Software

7 affected components

Microsoft All Windows

SAP Internet Communication Manager

SAP SAP Web Application Server=6.10

SAP SAP Web Application Server=6.20

SAP SAP Web Application Server=6.40

SAP SAP Web Application Server=7.0

SAP SAP Web Application Server=7.0.10

Remediation

Patch Available

http://secunia.com/advisories/25964

Event History

Jul 6, 2007

CVE Published

07:30 PM

Data Sourced

07:30 PM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3615?

CVE-2007-3615 is considered a high severity vulnerability as it allows remote attackers to cause a denial of service.

How do I fix CVE-2007-3615?

To fix CVE-2007-3615, ensure that you apply the latest security patches from SAP for your version of the SAP Web Application Server.

Which SAP products are affected by CVE-2007-3615?

CVE-2007-3615 affects the SAP Internet Communication Manager and SAP Web Application Server versions 6.10, 6.20, 6.40, and 7.0.

What are the potential impacts of CVE-2007-3615?

Exploiting CVE-2007-3615 can lead to a denial of service, resulting in the affected process crashing.

Is CVE-2007-3615 applicable only to Windows environments?

Yes, CVE-2007-3615 has been observed primarily in Windows environments running specific versions of SAP products.