Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP Internet Communication Manager超长URI拒绝服务漏洞
Vulnerability Description
Internet Communication Manager允许在SAP Web应用服务器之间使用HTTP、HTTPS和SMTP协议进行通讯。 ICM的缓存功能处理用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器崩溃。 ICM提供了ICM服务器缓存功能以提高性能。如果要判断是否将ICM用作Web缓存，可使用以下请求： http://target/foo.gif?sap-isc-key=ngs 这时就会返回错误： 500 Internal Server Error __________________
CVSS Information
N/A
Vulnerability Type
N/A