10.0
CRITICAL
CVE-2012-4341
SAP NetWeaver ABAP 7.x Stack-Based Buffer Overflow Vulnerability
Description

Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package with opcode 0x43 and sub opcode 0x4 to TCP port 3900.

INFO

Published Date :

Aug. 15, 2012, 9:55 p.m.

Last Modified :

Nov. 7, 2023, 2:11 a.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

10.0

Exploitability Score :

10.0
Public PoC/Exploit Available at Github

CVE-2012-4341 has a 12 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2012-4341 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Sap netweaver_abap
: Total Affected Vendor : 1 | Products : 1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2012-4341.

URL Resource
http://scn.sap.com/docs/DOC-8218
http://secunia.com/advisories/49744 Vendor Advisory
http://www.securitytracker.com/id?1027211
http://www.zerodayinitiative.com/advisories/ZDI-12-104/
http://www.zerodayinitiative.com/advisories/ZDI-12-111/
http://www.zerodayinitiative.com/advisories/ZDI-12-112/
https://service.sap.com/sap/support/notes/1649838
https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=1649840

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
CVEDB/cvedb

None

Python HTML CSS JavaScript

Updated: 1 month, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : Oct. 4, 2024, 12:35 a.m. This repo has been linked 3 different CVEs too.
Profile Photo
jerfinj/cve-search

None

Python HTML CSS JavaScript

Updated: 2 years, 3 months ago
0 stars 0 fork 0 watcher
Born at : Aug. 12, 2022, 2:45 p.m. This repo has been linked 9 different CVEs too.
Profile Photo
pgurudatta/cve-search

None

Python HTML CSS JavaScript

Updated: 2 years, 3 months ago
0 stars 0 fork 0 watcher
Born at : July 22, 2022, 6:57 a.m. This repo has been linked 9 different CVEs too.
Profile Photo
extremenetworks/cve-search-src

None

Python HTML CSS JavaScript

Updated: 1 year, 1 month ago
3 stars 0 fork 0 watcher
Born at : Feb. 22, 2021, 11 p.m. This repo has been linked 9 different CVEs too.
Profile Photo
CERT-hr/modified_cve-search

None

Python HTML CSS JavaScript Roff

Updated: 4 years, 3 months ago
0 stars 1 fork 1 watcher
Born at : May 12, 2020, 7:43 a.m. This repo has been linked 9 different CVEs too.
Profile Photo
swastik99/cve-search

None

python3 vulnerability-scanners vulnerability-detection webgoat

Python PowerShell Batchfile Shell HTML TeX C C++ Objective-C XSLT

Updated: 4 years, 10 months ago
0 stars 0 fork 0 watcher
Born at : Dec. 26, 2019, 12:34 p.m. This repo has been linked 9 different CVEs too.
Profile Photo
cve-search/cve-search-ng

WiP - cve-search next gen

Python CSS JavaScript HTML

Updated: 5 months ago
12 stars 5 fork 5 watcher
Born at : Dec. 9, 2019, 5:41 a.m. This repo has been linked 9 different CVEs too.
Profile Photo
zwei2008/cve

None

Python CSS JavaScript HTML

Updated: 6 years, 9 months ago
0 stars 0 fork 0 watcher
Born at : Feb. 8, 2018, 3:54 a.m. This repo has been linked 9 different CVEs too.
Profile Photo
r3p3r/cve-search

None

Python CSS JavaScript HTML

Updated: 6 years, 10 months ago
0 stars 0 fork 0 watcher
Born at : Jan. 1, 2018, 9:31 a.m. This repo has been linked 9 different CVEs too.
Profile Photo
enthought/cve-search

Default Repo description from terraform module

Python CSS JavaScript HTML

Updated: 3 years, 5 months ago
0 stars 0 fork 0 watcher
Born at : Oct. 18, 2017, 10:09 a.m. This repo has been linked 9 different CVEs too.
Profile Photo
miradam/cve-search

None

Python CSS JavaScript HTML

Updated: 7 years, 10 months ago
0 stars 1 fork 1 watcher
Born at : Jan. 16, 2017, 12:07 p.m. This repo has been linked 9 different CVEs too.
Profile Photo
cve-search/cve-search

cve-search - a tool to perform local searches for known vulnerabilities

cve-search common-vulnerabilities cpe cve-databases vulnerabilities vulnerability-detection vulnerability-assessment cve cve-scanning cve-entries

Python CSS JavaScript HTML

Updated: 2 months, 2 weeks ago
2273 stars 519 fork 519 watcher
Born at : May 6, 2012, 10:22 a.m. This repo has been linked 3 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2012-4341 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2012-4341 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CVE Modified by [email protected]

    Nov. 07, 2023

    Action Type Old Value New Value
    Added Reference MITRE https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=1649840 [No types assigned]
    Removed Reference MITRE https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1649840
  • CPE Deprecation Remap by [email protected]

    Oct. 06, 2022

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:sap:netweaver_abap:7.0:*:*:*:*:*:*:* OR *cpe:2.3:a:sap:netweaver_application_server_abap:7.0:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Oct. 06, 2022

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:sap:netweaver_abap:7.02:sp6:*:*:*:*:*:* OR *cpe:2.3:a:sap:netweaver_application_server_abap:7.02:sp6:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Oct. 06, 2022

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:sap:netweaver_abap:7.03:sp4:*:*:*:*:*:* OR *cpe:2.3:a:sap:netweaver_application_server_abap:7.03:sp4:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Aug. 13, 2018

    Action Type Old Value New Value
    Removed Reference https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=1649840 [No Types Assigned]
    Added Reference https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1649840 [No Types Assigned]
  • Initial Analysis by [email protected]

    Aug. 16, 2012

    Action Type Old Value New Value
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

10.13 }} 0.20%

score

0.95048

percentile

CVSS2 - Vulnerability Scoring System
Access Vector
Access Complexity
Authentication
Confidentiality
Integrity
Availability
: