CVE-2009-4603: Medium severity SAP SAP Kernel vulnerability
Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Application Server 6.x and 7.x, allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted request. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4603?
CVE-2009-4603 is rated as a moderate severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2009-4603?
To mitigate CVE-2009-4603, update your SAP Kernel versions 6.40, 7.00, 7.01, 7.10, 7.11, or 7.20 to the latest patched version provided by SAP.
What systems are affected by CVE-2009-4603?
CVE-2009-4603 affects SAP Kernel versions 6.40 to 7.20 and SAP Web Application Server versions 6.x.
What type of attack does CVE-2009-4603 enable?
CVE-2009-4603 allows remote attackers to perform a denial of service attack, specifically shutting down the Management Console.
Is user intervention required to exploit CVE-2009-4603?
Yes, an attacker must send a crafted request to exploit CVE-2009-4603 and initiate a denial of service.