Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1546601-4)
SAP Support Packages
(BW_35_ADDON_FOR_SAP_GUI_710_SP150_000000, BW_35_ADDON_FOR_SAP_GUI_710_SP999999_999999)
Описание
A buffer overflow vulnerability exists in BW WAD. This enables a malicious user to inject code into the working memory that is subsequently executed by the application. It can also be used to cause a general fault in the product, thereby producing a termination of the product.
Как исправить
SAP NetWeaver 7.0 BW Front End for GUI 710
Import Front-End Patch (FEP) 1500 (or higher) for SAP NetWeaver 7.x BW Front End (bi710sp15_1500-10004472.exe) into your system. The FEP will be available as soon as SAP Note 1413032 with the short text "SAPBWNews NW 7.x BW Add-On Frontend Patch 1500 - GUI 7.10", which describes this FEP in more detail, is released for customers.
You can check the planned availability dates in the attached SAP Note 1085218.
SAP NetWeaver 7.0 BW Front End for GUI 720
Import Front-End Patch (FEP) 400 (or higher) for SAP NetWeaver 7.x BW Front End (bi720sp4_400-10004472.exe) into your system. The FEP will be available as soon as SAP Note 1435815 with the short text "SAPBWNews NW 7.x BW Add-On Frontend Patch 400 - GUI 7.20", which describes this FEP in more detail, is released for customers.
You can check the planned availability dates in the attached SAP Note 1085218.
This SAP Note might already be available before the FEP is released. In this case, however, the short text still contains the terms "preliminary version".
Import Front-End Patch (FEP) 1500 (or higher) for SAP NetWeaver 7.x BW Front End (bi710sp15_1500-10004472.exe) into your system. The FEP will be available as soon as SAP Note 1413032 with the short text "SAPBWNews NW 7.x BW Add-On Frontend Patch 1500 - GUI 7.10", which describes this FEP in more detail, is released for customers.
You can check the planned availability dates in the attached SAP Note 1085218.
SAP NetWeaver 7.0 BW Front End for GUI 720
Import Front-End Patch (FEP) 400 (or higher) for SAP NetWeaver 7.x BW Front End (bi720sp4_400-10004472.exe) into your system. The FEP will be available as soon as SAP Note 1435815 with the short text "SAPBWNews NW 7.x BW Add-On Frontend Patch 400 - GUI 7.20", which describes this FEP in more detail, is released for customers.
You can check the planned availability dates in the attached SAP Note 1085218.
This SAP Note might already be available before the FEP is released. In this case, however, the short text still contains the terms "preliminary version".
Ссылки
