Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2003-1035

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SAP R/3是一个基于客户/服务机结构和开放系统的，集成的企业资源计划系统。 SAP R/3对多次登录尝试没有正确锁定帐户，远程攻击者可以利用这个漏洞对帐户进行暴力猜解。 默认安装下，SAP R/3会在三此错误登录尝试后SAPGUI会杀掉GUI，在4次SAPGUI崩溃(4*3 =3D 12次尝试)后，测试的帐户就会琐定(在SAPR3.USR02 UFLAG=3D128)。但是攻击者如果使用SDK RFC的sapinfo工具进行密码验证操作，可以多次进行连接而SAP不锁定用户帐户，这可导致攻击者对已知用户

AI Predicted 7.5 Difficulty: Easy EPSS 1.54% · P73
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2003-1035

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SAP R/3 sapinfo RFC API帐户锁定漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP R/3是一个基于客户/服务机结构和开放系统的，集成的企业资源计划系统。 SAP R/3对多次登录尝试没有正确锁定帐户，远程攻击者可以利用这个漏洞对帐户进行暴力猜解。 默认安装下，SAP R/3会在三此错误登录尝试后SAPGUI会杀掉GUI，在4次SAPGUI崩溃(4*3 =3D 12次尝试)后，测试的帐户就会琐定(在SAPR3.USR02 UFLAG=3D128)。但是攻击者如果使用SDK RFC的sapinfo工具进行密码验证操作，可以多次进行连接而SAP不锁定用户帐户，这可导致攻击者对已知用户
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2003-1035

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-1035

请登录查看更多情报信息。

Vendor Advisories for CVE-2003-1035 (3)

Same Patch Batch · n/a · 2004-03-16 · 21 CVEs total

CVE-2003-0594 Mozilla Browser Cookie路径限制绕过漏洞
CVE-2004-0224 Courier多个远程缓冲区溢出漏洞
CVE-2004-0217 Symantec AntiVirus Scan Engine For Red Hat Linux不安全临时文件漏洞
CVE-2004-0107 Sysstat/lsag以不安全方式创建临时文件漏洞
CVE-2003-1039 SAP缓冲区溢出漏洞
CVE-2003-1038 SAP Internet Transaction Server (ITS)组件漏洞
CVE-2003-1037 SAP Internet Transaction Server (ITS)格式化字符串漏洞
CVE-2003-1036 SAP Internet Transaction Server(ITS)缓冲区溢出漏洞
CVE-2003-1034 SAP DB RPM安装文件全局可写漏洞
CVE-2003-1033 SAP数据库开发工具INSTDBMSRV INSTROOT环境变量漏洞
CVE-2002-1576 SAP DB本地符号链接漏洞
CVE-2003-0593 Opera 路径遍历漏洞
CVE-2003-0592 多个供应商的互联网浏览器的cookie路径参数权限绕过漏洞
CVE-2003-0514 多个供应商的互联网浏览器的cookie路径参数限制绕过漏洞
CVE-2003-0513 Microsoft Internet Explorer 安全漏洞
CVE-2003-0257 IBM AIX打印子系统多个未明安全漏洞
CVE-2003-0202 Metrics不安全本地文件创建漏洞
CVE-2002-1579 SAP SAPgui远程拒绝服务攻击漏洞
CVE-2002-1578 ORACLE SAP R/3未授权数据访问漏洞
CVE-2002-1577 默认用户和密码客户端提升特权漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2003-1035

No comments yet

Leave a comment