CVE-2009-4603
First published: Tue Jan 12 2010(Updated: )
Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Application Server 6.x and 7.x, allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted request. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Kernel | =6.40 | |
| SAP Kernel | =7.00 | |
| SAP Kernel | =7.01 | |
| SAP Kernel | =7.10 | |
| SAP Kernel | =7.11 | |
| SAP Kernel | =7.20 | |
| SAP NetWeaver | =7.0 | |
| SAP Web Application Server | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-4603?
CVE-2009-4603 is rated as a moderate severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2009-4603?
To mitigate CVE-2009-4603, update your SAP Kernel versions 6.40, 7.00, 7.01, 7.10, 7.11, or 7.20 to the latest patched version provided by SAP.
What systems are affected by CVE-2009-4603?
CVE-2009-4603 affects SAP Kernel versions 6.40 to 7.20 and SAP Web Application Server versions 6.x.
What type of attack does CVE-2009-4603 enable?
CVE-2009-4603 allows remote attackers to perform a denial of service attack, specifically shutting down the Management Console.
Is user intervention required to exploit CVE-2009-4603?
Yes, an attacker must send a crafted request to exploit CVE-2009-4603 and initiate a denial of service.
- collector/nvd-historical
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/last-modified-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap kernel
- version/sap kernel/6.40
- version/sap kernel/7.00
- version/sap kernel/7.01
- version/sap kernel/7.10
- version/sap kernel/7.11
- version/sap kernel/7.20
- canonical/sap netweaver
- version/sap netweaver/7.0
- canonical/sap web application server
- version/sap web application server/6.0