EXPLOIT SAP NetWeaver DiagTraceHex Denial of Service -2 (CVE-2012-2612)

Rule ID

1056121

Severity

Medium

Description

A denial of service vulnerability exists in SAP NetWeaver's Dispatcher service. The vulnerability is due to insufficient validation while parsing incoming requests. The vulnerable "Dispatcher" service listens on port TCP/32## (## being the SAP system number) by default.

Impact

Denial of service

Recommendation

Update vendor's patch.

IPS Category

Exploits

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A