[ERPSCAN-16-002] SAP HANA - log injection and no size restriction
ERPScan inc <[email protected]> Fri, 15 Apr 2016 17:21:41 +0300
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.penetration,gmane.comp.security.news.securitytracker,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <CANHWe90qf-57QqaskO0A6t5YdS+UhbOYHuMO9_Cr+jp8_HF3qQ@mail.gmail.com> |
QXBwbGljYXRpb246ICAgU0FQIEhBTkEKVmVyc2lvbnMgQWZmZWN0ZWQ6IFNBUCBIQU5BClZlbmRv ciBVUkw6IGh0dHA6Ly9TQVAuY29tCkJ1Z3M6IExvZyBpbmplY3Rpb24KU2VudDogICAgMjguMDku MjAxNQpSZXBvcnRlZDogMjguMDkuMjAxNQpWZW5kb3IgcmVzcG9uc2U6IDI5LjA5LjIwMTUKRGF0 ZSBvZiBQdWJsaWMgQWR2aXNvcnk6IDEyLjAxLjIwMTYKUmVmZXJlbmNlOiBTQVAgU2VjdXJpdHkg Tm90ZSAyMjQxOTc4CkF1dGhvcjogICAgICAgICBNYXRoaWV1IEdlbGkgKEVSUFNjYW4pCgoKCkRl c2NyaXB0aW9uCgoKMS4gQURWSVNPUlkgSU5GT1JNQVRJT04KClRpdGxlOiBTQVAgSEFOQQpBZHZp c29yeSBJRDogW0VSUFNDQU4tMTYtMDAyXQpSaXNrOiBIaWdodApBZHZpc29yeSBVUkw6IGh0dHA6 Ly9lcnBzY2FuLmNvbS9hZHZpc29yaWVzL2VycHNjYW4tMTYtMDAyLXNhcC1oYW5hLWxvZy1pbmpl Y3Rpb24tYW5kLW5vLXNpemUtcmVzdHJpY3Rpb24vCkRhdGUgcHVibGlzaGVkOiAxMi4wMS4yMDE2 ClZlbmRvcnMgY29udGFjdGVkOiBTQVAKCjIuIFZVTE5FUkFCSUxJVFkgSU5GT1JNQVRJT04KCkNs YXNzOiBMb2cgaW5qZWN0aW9uCkltcGFjdDogZnJhdWQgbG9nIGV2ZW50cywgaGlkaW5nIGFjdGlv bnMgb24gdGhlIHN5c3RlbQpSZW1vdGVseSBFeHBsb2l0YWJsZTogWWVzCkxvY2FsbHkgRXhwbG9p dGFibGU6IE5vCgpDVlNTIEluZm9ybWF0aW9uCkNWU1MgQmFzZSBTY29yZTogIDUuMCAvIDEwCkNW U1MgQmFzZSBWZWN0b3I6CgpBViA6IEFjY2VzcyBWZWN0b3IgKFJlbGF0ZWQgZXhwbG9pdCByYW5n ZSkgTmV0d29yayAoTikKQUMgOiBBY2Nlc3MgQ29tcGxleGl0eSAoUmVxdWlyZWQgYXR0YWNrIGNv bXBsZXhpdHkpIE1lZGl1bSAoTSkKQXUgOiBBdXRoZW50aWNhdGlvbiAoTGV2ZWwgb2YgYXV0aGVu dGljYXRpb24gbmVlZGVkIHRvIGV4cGxvaXQpIE5vbmUgKE4pCkMgOiBJbXBhY3QgdG8gQ29uZmlk ZW50aWFsaXR5IE5vbmUgKE4pCkkgIDogSW1wYWN0IHRvIEludGVncml0eSBQYXJ0aWFsIChQKQpB IDogSW1wYWN0IHRvIEF2YWlsYWJpbGl0eSBOb25lIChOKQoKMy4gVlVMTkVSQUJJTElUWSBERVND UklQVElPTgoKQSBwb3RlbnRpYWwgYXR0YWNrZXIgY2FuIHBlcmZvcm0gbWFsaWNpb3VzIGNhbGxz IG9mIHRoZSBkZWJ1ZwpmdW5jdGlvbnMgb2YgdGhlIFNBUCBIQU5BIEV4dGVuZGVkIEFwcGxpY2F0 aW9uIFNlcnZpY2VzIENsYXNzaWMgKFhTKS4KCgo0LiBWVUxORVJBQkxFIFBBQ0tBR0VTCgpTQVAg SEFOQSAxLjAwLjA5NS4wMC4xNDI5MDg2OTUwCk90aGVyIHZlcnNpb25zIGFyZSBwcm9iYWJseSBh ZmZlY3RlZCB0b28sIGJ1dCB0aGV5IHdlcmUgbm90IGNoZWNrZWQuCgoKNS4gU09MVVRJT05TIEFO RCBXT1JLQVJPVU5EUwoKVG8gY29ycmVjdCB0aGlzIHZ1bG5lcmFiaWxpdHksIGluc3RhbGwgU0FQ IFNlY3VyaXR5IE5vdGUgMjI0MTk3OAoKCjYuIEFVVEhPUgoKTWF0aGlldSBHZWxpICAoRVJQU2Nh bikKCgo3LiBURUNITklDQUwgREVTQ1JJUFRJT04KCkFub255bW91cyBhdHRhY2tlciBjYW4gdXNl IGEgc3BlY2lhbCBIVFRQIHJlcXVlc3QgdG8gaW5qZWN0IGxvZ3MgaW4KdGhlIHhzZW5naW5lIHRy YWNlIGZpbGUgd2l0aG91dCBzaXplIHJlc3RyaWN0aW9uLlRoZSB2dWxuZXJhYmlsaXR5IGlzCnRy aWdnZXJlZCB3aGVuIHRoZSB1c2VybmFtZSBzZW50IHRvIHRoZQovc2FwL2hhbmEveHMvZGVidWdn ZXIvZ3JhbnRBY2Nlc3MueHNjZnVuYyBwYWdlIGlzIGxvbmdlciB0aGFuIDI1NgpjaGFyYWN0ZXJz LgoKCgo4LiBSRVBPUlQgVElNRUxJTkUKClNlbnQ6ICAgMjguMDkuMjAxNQpSZXBvcnRlZDogMjgu MDkuMjAxNQpWZW5kb3IgcmVzcG9uc2U6IDI5LjA5LjIwMTUKRGF0ZSBvZiBQdWJsaWMgQWR2aXNv cnk6IDEyLjAxLjIwMTYKCgo5LiBSRUZFUkVOQ0VTCgpodHRwOi8vZXJwc2Nhbi5jb20vYWR2aXNv cmllcy9lcnBzY2FuLTE2LTAwMi1zYXAtaGFuYS1sb2ctaW5qZWN0aW9uLWFuZC1uby1zaXplLXJl c3RyaWN0aW9uLwoKMTAuIEFCT1VUIEVSUFNjYW4gUmVzZWFyY2gKClRoZSBjb21wYW554oCZcyBl eHBlcnRpc2UgaXMgYmFzZWQgb24gdGhlIHJlc2VhcmNoIHN1YmRpdmlzaW9uIG9mCkVSUFNjYW4s IHdoaWNoIGlzIGVuZ2FnZWQgaW4gdnVsbmVyYWJpbGl0eSByZXNlYXJjaCBhbmQgYW5hbHlzaXMg b2YKY3JpdGljYWwgZW50ZXJwcmlzZSBhcHBsaWNhdGlvbnMuIEl0IGhhcyBhY2hpZXZlZCBtdWx0 aXBsZQphY2tub3dsZWRnbWVudHMgZnJvbSB0aGUgbGFyZ2VzdCBzb2Z0d2FyZSB2ZW5kb3JzIGxp a2UgU0FQLCBPcmFjbGUsCk1pY3Jvc29mdCwgSUJNLCBWTXdhcmUsIEhQIGZvciBkaXNjb3Zlcmlu ZyBtb3JlIHRoYW4gNDAwCnZ1bG5lcmFiaWxpdGllcyBpbiB0aGVpciBzb2x1dGlvbnMgKDIwMCBv ZiB0aGVtIGp1c3QgaW4gU0FQISkuCkVSUFNjYW4gcmVzZWFyY2hlcnMgYXJlIHByb3VkIHRvIGhh dmUgZXhwb3NlZCBuZXcgdHlwZXMgb2YKdnVsbmVyYWJpbGl0aWVzIChUT1AgMTAgV2ViIEhhY2tp bmcgVGVjaG5pcXVlcyAyMDEyKSBhbmQgdG8gYmUKbm9taW5hdGVkIGZvciB0aGUgYmVzdCBzZXJ2 ZXItc2lkZSB2dWxuZXJhYmlsaXR5IGF0IEJsYWNrSGF0IDIwMTMuCkVSUFNjYW4gZXhwZXJ0cyBo YXZlIGJlZW4gaW52aXRlZCB0byBzcGVhaywgcHJlc2VudCwgYW5kIHRyYWluIGF0IDYwKwpwcmlt ZSBpbnRlcm5hdGlvbmFsIHNlY3VyaXR5IGNvbmZlcmVuY2VzIGluIDI1KyBjb3VudHJpZXMgYWNy b3NzIHRoZQpjb250aW5lbnRzLiBUaGVzZSBpbmNsdWRlIEJsYWNrSGF0LCBSU0EsIEhJVEIsIGFu ZCBwcml2YXRlIFNBUAp0cmFpbmluZ3MgaW4gc2V2ZXJhbCBGb3J0dW5lIDIwMDAgY29tcGFuaWVz LgpFUlBTY2FuIHJlc2VhcmNoZXJzIGxlYWQgdGhlIHByb2plY3QgRUFTLVNFQywgd2hpY2ggaXMg Zm9jdXNlZCBvbgplbnRlcnByaXNlIGFwcGxpY2F0aW9uIHNlY3VyaXR5IHJlc2VhcmNoIGFuZCBh d2FyZW5lc3MuIFRoZXkgaGF2ZQpwdWJsaXNoZWQgMyBleGhhdXN0aXZlIGFubnVhbCBhd2FyZC13 aW5uaW5nIHN1cnZleXMgYWJvdXQgU0FQCnNlY3VyaXR5LgpFUlBTY2FuIGV4cGVydHMgaGF2ZSBi ZWVuIGludGVydmlld2VkIGJ5IGxlYWRpbmcgbWVkaWEgcmVzb3VyY2VzIGFuZApmZWF0dXJlZCBp biBzcGVjaWFsaXplZCBpbmZvLXNlYyBwdWJsaWNhdGlvbnMgd29ybGR3aWRlLiBUaGVzZSBpbmNs dWRlClJldXRlcnMsIFlhaG9vLCBTQyBNYWdhemluZSwgVGhlIFJlZ2lzdGVyLCBDSU8sIFBDIFdv cmxkLCBEYXJrUmVhZGluZywKSGVpc2UsIGFuZCBDaGluYWJ5dGUsIHRvIG5hbWUgYSBmZXcuCldl IGhhdmUgaGlnaGx5IHF1YWxpZmllZCBleHBlcnRzIGluIHN0YWZmIHdpdGggZXhwZXJpZW5jZSBp biBtYW55CmRpZmZlcmVudCBmaWVsZHMgb2Ygc2VjdXJpdHksIGZyb20gd2ViIGFwcGxpY2F0aW9u cyBhbmQKbW9iaWxlL2VtYmVkZGVkIHRvIHJldmVyc2UgZW5naW5lZXJpbmcgYW5kIElDUy9TQ0FE QSBzeXN0ZW1zLAphY2N1bXVsYXRpbmcgdGhlaXIgZXhwZXJpZW5jZSB0byBjb25kdWN0IHRoZSBi ZXN0IFNBUCBzZWN1cml0eQpyZXNlYXJjaC4KCgoxMS4gQUJPVVQgRVJQU2NhbgoKRVJQU2NhbiBp cyB0aGUgbW9zdCByZXNwZWN0ZWQgYW5kIGNyZWRpYmxlIEJ1c2luZXNzIEFwcGxpY2F0aW9uClNl Y3VyaXR5IHByb3ZpZGVyLiBGb3VuZGVkIGluIDIwMTAsIHRoZSBjb21wYW55IG9wZXJhdGVzIGds b2JhbGx5IGFuZAplbmFibGVzIGxhcmdlIE9pbCBhbmQgR2FzLCBGaW5hbmNpYWwgYW5kIFJldGFp bCBvcmdhbml6YXRpb25zIHRvCnNlY3VyZSB0aGVpciBtaXNzaW9uLWNyaXRpY2FsIHByb2Nlc3Nl cy4gTmFtZWQgYXMgYW4g4oCYRW1lcmdpbmcgVmVuZG9y4oCZCmluIFNlY3VyaXR5IGJ5IENSTiwg bGlzdGVkIGFtb25nIOKAnFRPUCAxMDAgU0FQIFNvbHV0aW9uIHByb3ZpZGVyc+KAnSBhbmQKZGlz dGluZ3Vpc2hlZCBieSAzMCsgb3RoZXIgYXdhcmRzLCBFUlBTY2FuIGlzIHRoZSBsZWFkaW5nIFNB UCBTRQpwYXJ0bmVyIGluIGRpc2NvdmVyaW5nIGFuZCByZXNvbHZpbmcgc2VjdXJpdHkgdnVsbmVy YWJpbGl0aWVzLiBFUlBTY2FuCmNvbnN1bHRhbnRzIHdvcmsgd2l0aCBTQVAgU0UgaW4gV2FsbGRv cmYgdG8gYXNzaXN0IGluIGltcHJvdmluZyB0aGUKc2VjdXJpdHkgb2YgdGhlaXIgbGF0ZXN0IHNv bHV0aW9ucy4KRVJQU2NhbuKAmXMgcHJpbWFyeSBtaXNzaW9uIGlzIHRvIGNsb3NlIHRoZSBnYXAg YmV0d2VlbiB0ZWNobmljYWwgYW5kCmJ1c2luZXNzIHNlY3VyaXR5LCBhbmQgcHJvdmlkZSBzb2x1 dGlvbnMgdG8gZXZhbHVhdGUgYW5kIHNlY3VyZSBTQVAKYW5kIE9yYWNsZSBFUlAgc3lzdGVtcyBh bmQgYnVzaW5lc3MtY3JpdGljYWwgYXBwbGljYXRpb25zIGZyb20gYm90aCwKY3liZXItYXR0YWNr cyBhcyB3ZWxsIGFzIGludGVybmFsIGZyYXVkLiBVc3VhbGx5IG91ciBjbGllbnRzIGFyZSBsYXJn ZQplbnRlcnByaXNlcywgRm9ydHVuZSAyMDAwIGNvbXBhbmllcyBhbmQgbWFuYWdlZCBzZXJ2aWNl IHByb3ZpZGVycwp3aG9zZSByZXF1aXJlbWVudHMgYXJlIHRvIGFjdGl2ZWx5IG1vbml0b3IgYW5k IG1hbmFnZSBzZWN1cml0eSBvZiB2YXN0ClNBUCBsYW5kc2NhcGVzIG9uIGEgZ2xvYmFsIHNjYWxl LgpXZSDigJhmb2xsb3cgdGhlIHN1buKAmSBhbmQgZnVuY3Rpb24gaW4gdHdvIGh1YnMsIGxvY2F0 ZWQgaW4gdGhlIFBhbG8gQWx0bwphbmQgQW1zdGVyZGFtIHRvIHByb3ZpZGUgdGhyZWF0IGludGVs bGlnZW5jZSBzZXJ2aWNlcywgYWdpbGUgc3VwcG9ydAphbmQgb3BlcmF0ZSBsb2NhbCBvZmZpY2Vz IGFuZCBwYXJ0bmVyIG5ldHdvcmsgc3Bhbm5pbmcgMjArIGNvdW50cmllcwphcm91bmQgdGhlIGds b2JlLgoKCkFkcmVzcyBVU0E6IDIyOCBIYW1pbHRvbiBBdmVudWUsIEZsLiAzLCBQYWxvIEFsdG8s IENBLiA5NDMwMQpQaG9uZTogNjUwLjc5OC41MjU1ClR3aXR0ZXI6IEBlcnBzY2FuClNjb29wLWl0 OiBCdXNpbmVzcyBBcHBsaWNhdGlvbiBTZWN1cml0eQoKX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KU2VudCB0aHJvdWdoIHRoZSBGdWxsIERpc2Nsb3N1cmUg bWFpbGluZyBsaXN0Cmh0dHBzOi8vbm1hcC5vcmcvbWFpbG1hbi9saXN0aW5mby9mdWxsZGlzY2xv c3VyZQpXZWIgQXJjaGl2ZXMgJiBSU1M6IGh0dHA6Ly9zZWNsaXN0cy5vcmcvZnVsbGRpc2Nsb3N1 cmUv