The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 prior to 20070109 implements an option for exclusive access to an RFC server, which allows remote malicious users to cause a denial of service (client lockout) via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
sap rfc_library 6.4 |
||
sap rfc_library 7.0 |