Vulnerability Description
Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Internet Transaction Server | <= 4.6_pl463 |
References
- http://www.phenoelit.de/stuff/Phenoelit20c3.pd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14186
- http://www.phenoelit.de/stuff/Phenoelit20c3.pd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14186
FAQ
What is CVE-2003-1036?
CVE-2003-1036 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session par...
How severe is CVE-2003-1036?
CVE-2003-1036 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1036?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Internet Transaction Server.