APP: SAP NetWeaver DiagTraceHex Denial of Service

This signature detects attempts to exploit a known vulnerability against SAP NetWeaver DiagTraceHex service. A successful attack can result in a denial-of-service condition.

Extended Description

SAP NetWeaver is prone to a remote code-execution vulnerability and multiple denial-of-service vulnerabilities. Successfully exploiting these issues may allow an attacker to execute arbitrary code with the privileges of the user running the affected application or crash the application.

Affected Products

Sap netweaver

References

BugTraq: 53424

CVE: CVE-2012-2612

Short Name
APP:SAP:NETWEAVER-DOS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
CVE-2012-2612 Denial DiagTraceHex NetWeaver SAP Service bid:53424 of
Release Date
06/07/2012
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3600
Port
TCP/3200-3299
False Positive
Unknown
Vendors

Sap

CVSS Score

5.0

Found a potential security threat?