CVE-2013-1592: Buffer Overflow
First published: Thu Jan 23 2020(Updated: )
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver | =7.01-sr1 | |
| SAP NetWeaver | =7.02-sp06 | |
| SAP NetWeaver | =7.30-sp04 | |
| SAP NetWeaver | =2004s |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities
- http://www.exploit-db.com/exploits/24511
- http://www.securityfocus.com/bid/57956
- http://www.securitytracker.com/id/1028148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82064
- https://packetstormsecurity.com/files/cve/CVE-2013-1592
Frequently Asked Questions
What is CVE-2013-1592?
CVE-2013-1592 is a Buffer Overflow vulnerability that exists in the Message Server service _MsJ2EE_AddStatistics() function in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04.
How does CVE-2013-1592 affect SAP NetWeaver?
CVE-2013-1592 affects SAP NetWeaver versions 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04.
What is the severity of CVE-2013-1592?
CVE-2013-1592 has a severity rating of 9.8 (Critical).
How can a remote user exploit the CVE-2013-1592 vulnerability?
A remote malicious user can exploit the CVE-2013-1592 vulnerability by sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN.
Are there any references available for CVE-2013-1592?
Yes, you can find references for CVE-2013-1592 at the following links: [link1], [link2], [link3].
- collector/nvd-index
- agent/references
- vendor/sap
- canonical/sap netweaver
- version/sap netweaver/7.01-sr1
- version/sap netweaver/7.02-sp06
- version/sap netweaver/7.30-sp04
- version/sap netweaver/2004s