← back
CVE-2014-0995

CVE-2014-0995

EPSS 9.7%
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/128726/SAP-Netweaver-Enqueue-Server-Trace-Pattern-Denial-Of-Service.htmlunverifiedexploitdbwww.exploit-db.com/exploits/35000unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/http://packetstormsecurity.com/files/128726/SAP-Netweaver-Enqueue-Server-Trace-Pattern-Denial-Of-Service.htmlhttp://seclists.org/fulldisclosure/2014/Oct/76http://secunia.com/advisories/60950https://exchange.xforce.ibmcloud.com/vulnerabilities/97610https://twitter.com/SAP_Gsupport/status/522750365780160513http://www.coresecurity.com/advisories/sap-netweaver-enqueue-server-trace-pattern-denial-service-vulnerabilityhttp://www.securityfocus.com/archive/1/533719/100/0/threaded