Description
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.
References
- 20070705 Internet Communication Manager Denial Of Service Attack mailing-list
- sap-icman-dos(35278) vdb-entry
- 20070705 Internet Communication Manager Denial Of Service Attack mailing-list
- 38095 vdb-entry
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-internet-communication-manager-dos/
- 25964 third-party-advisory
- 1018336 vdb-entry
- ADV-2007-2450 vdb-entry
- 24774 vdb-entry
- 2875 third-party-advisory