EXPLOIT NetWeaver Dispatcher Stack Buffer Overflow -2 (CVE-2012-2611)

Rule ID

1056120

Severity

High

Description

A stack buffer overflow vulnerability exists in SAP NetWeaver's Dispatcher service. The vulnerability is due to insufficient bounds checking while parsing incoming requests. This service listens by default on port TCP/32NN (being NN the SAP system number) of a host running the "Dispatcher" service.

Impact

Denial of service

Recommendation

Update vendor's patch.

IPS Category

Buffer Overflow

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A