[ERPSCAN-16-036] SAP ASE ODATA SERVER - DENIAL OF SERVICE
ERPScan inc <[email protected]> Thu, 19 Jan 2017 16:07:24 +0300
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.penetration,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <CANHWe92Z4yzi4y7qgrPL-=+-dgcTou8LhZpmE4dazqdYmV0DJg@mail.gmail.com> |
QXBwbGljYXRpb246IFNBUCBBU0UKClZlcnNpb25zIEFmZmVjdGVkOiBTQVAgQVNFIE9EQVRBIFNl cnZlciB2MTYKClZlbmRvciBVUkw6IGh0dHA6Ly9TQVAuY29tCgpCdWdzOiBEZW5pYWwgb2YgU2Vy dmljZQoKU2VudDogMDEuMDIuMjAxNgoKUmVwb3J0ZWQ6IDAyLjAyLjIwMTYKClZlbmRvciByZXNw b25zZTogMDIuMDIuMjAxNgoKRGF0ZSBvZiBQdWJsaWMgQWR2aXNvcnk6IDEyLjEwLjIwMTYKClJl ZmVyZW5jZTogU0FQIFNlY3VyaXR5IE5vdGUgMjMzMDQyMgoKQXV0aG9yOiBWYWhhZ24gQHZhaF8x MyBWYXJkYW55YW4gKEVSUFNjYW4pCgoKCkRlc2NyaXB0aW9uCgoxLiBBRFZJU09SWSBJTkZPUk1B VElPTgoKVGl0bGU6W0VSUFNDQU4tMTYtMDM2XSBTQVAgQVNFIE9EQVRBIFNFUlZFUiDigJMgREVO SUFMIE9GIFNFUlZJQ0UKCkFkdmlzb3J5IElEOltFUlBTQ0FOLTE2LTAzNl0KClJpc2s6IGhpZ2gK CkFkdmlzb3J5IFVSTDoKaHR0cHM6Ly9lcnBzY2FuLmNvbS9hZHZpc29yaWVzL2VycHNjYW4tMTYt MDM2LXNhcC1hc2Utb2RhdGEtc2VydmVyLWRlbmlhbC1zZXJ2aWNlLwoKRGF0ZSBwdWJsaXNoZWQ6 IDExLjAxLjIwMTcKClZlbmRvcnMgY29udGFjdGVkOiBTQVAKCgoyLiBWVUxORVJBQklMSVRZIElO Rk9STUFUSU9OCgpDbGFzczogRGVuaWFsIG9mIFNlcnZpY2UKCkltcGFjdDogUmVzb3VyY2UgRXho YXVzdGlvbgoKUmVtb3RlbHkgRXhwbG9pdGFibGU6IHllcwoKTG9jYWxseSBFeHBsb2l0YWJsZTog bm8KCkNWRTogQ1ZFLTIwMTctNTM3MQoKQ1ZTUyBJbmZvcm1hdGlvbgoKQ1ZTUyBCYXNlIFNjb3Jl IHYzOiAgICA3LjUgLyAxMAoKQ1ZTUyBCYXNlIFZlY3RvcjoKCkFWIDogQXR0YWNrIFZlY3RvciAo UmVsYXRlZCBleHBsb2l0IHJhbmdlKSBOZXR3b3JrIChOKQoKQUMgOiBBdHRhY2sgQ29tcGxleGl0 eSAoUmVxdWlyZWQgYXR0YWNrIGNvbXBsZXhpdHkpIExvdyAoTCkKClBSIDogUHJpdmlsZWdlcyBS ZXF1aXJlZCAoTGV2ZWwgb2YgcHJpdmlsZWdlcyBuZWVkZWQgdG8gZXhwbG9pdCkgTm9uZSAoTikK ClVJIDogVXNlciBJbnRlcmFjdGlvbiAoUmVxdWlyZWQgdXNlciBwYXJ0aWNpcGF0aW9uKSBOb25l IChOKQoKUyA6IFNjb3BlIChDaGFuZ2UgaW4gc2NvcGUgZHVlIHRvIGltcGFjdCBjYXVzZWQgdG8g Y29tcG9uZW50cyBiZXlvbmQgdGhlCnZ1bG5lcmFibGUgY29tcG9uZW50KSBVbmNoYW5nZWQgKFUp CgpDIDogSW1wYWN0IHRvIENvbmZpZGVudGlhbGl0eSBOb25lIChOKQoKSSA6IEltcGFjdCB0byBJ bnRlZ3JpdHkgTm9uZSAoTikKCkEgOiBJbXBhY3QgdG8gQXZhaWxhYmlsaXR5IEhpZ2ggKEgpCgoK CjMuIFZVTE5FUkFCSUxJVFkgREVTQ1JJUFRJT04KCkFuIGF0dGFja2VyIGNhbiB0cmlnZ2VyIGEg Y29uZGl0aW9uIGluIHdoaWNoIHRoZSBwcm9jZXNzIGNlYXNlcyB0byBydW4uClRoaXMgY29uZGl0 aW9uIGNhbiBiZSBpbnRlbnRpb25hbGx5IHByb3Zva2VkIGJ5IGFuIGF0dGFja2VyIHRvIGNhdXNl CmEgZGVuaWFsIG9mIHNlcnZpY2UuCgoKNC4gVlVMTkVSQUJMRSBQQUNLQUdFUwoKClNJUQoKMTYu MAoKClNRTF9BTllXSEVSRV9QRVJTT05BTF9TRVJWRVIKCjE2LjAKCgpTWUJBU0VfQVNFX1NFUlZF UgoKMTUuNwoKClNZQkFTRV9BU0VfU0VSVkVSCgoxNi4wCgpTWUJBU0VfQVNFX0NFX1NFUlZFUgoK MTUuNwoKNS4gU09MVVRJT05TIEFORCBXT1JLQVJPVU5EUwoKVG8gY29ycmVjdCB0aGlzIHZ1bG5l cmFiaWxpdHksIGluc3RhbGwgU0FQIFNlY3VyaXR5IE5vdGUgIDIzMzA0MjIKCjYuIEFVVEhPUgoK VmFoYWduIFZhcmRhbnlhbiAoRVJQU2NhbikKCgo3LiBURUNITklDQUwgREVTQ1JJUFRJT04KCkJ5 IHNlbmRpbmcgdGhlIHNwZWNpYWwgcmVxdWVzdCB0byB0aGUgU0FQIEFTRSBPZGF0YSBTZXJ2ZXIK KEM6XFNBUFxPREFUQS0xNl8wXGJpbjY0KSwgeW91IGNhbiBjcmFzaCBpdC4KCgo4LiBSRVBPUlQg VElNRUxJTkUKClJlcG9ydGVkOiAwMi4wMi4yMDE2CgpWZW5kb3IgcmVzcG9uc2U6IDAyLjAyLjIw MTYKCkRhdGUgb2YgUHVibGljIEFkdmlzb3J5OiAxMi4xMC4yMDE2CgoKOS4gUkVGRVJFTkNFUwoK aHR0cHM6Ly9lcnBzY2FuLmNvbS9hZHZpc29yaWVzL2VycHNjYW4tMTYtMDM2LXNhcC1hc2Utb2Rh dGEtc2VydmVyLWRlbmlhbC1zZXJ2aWNlLwoKMTAuIEFCT1VUIEVSUFNjYW4gUmVzZWFyY2gKCkVS UFNjYW4gcmVzZWFyY2ggdGVhbSBzcGVjaWFsaXplcyBpbiB2dWxuZXJhYmlsaXR5IHJlc2VhcmNo IGFuZCBhbmFseXNpcyBvZgpjcml0aWNhbCBlbnRlcnByaXNlIGFwcGxpY2F0aW9ucy4gSXQgd2Fz IGFja25vd2xlZGdlZCBtdWx0aXBsZSB0aW1lcyBieSB0aGUKbGFyZ2VzdCBzb2Z0d2FyZSB2ZW5k b3JzIGxpa2UgU0FQLCBPcmFjbGUsIE1pY3Jvc29mdCwgSUJNLCBWTXdhcmUsIEhQIGZvcgpkaXNj b3ZlcmluZyBtb3JlIHRoYW4gNDAwIHZ1bG5lcmFiaWxpdGllcyBpbiB0aGVpciBzb2x1dGlvbnMg KDIwMCBvZiB0aGVtCmp1c3QgaW4gU0FQISkuCgpFUlBTY2FuIHJlc2VhcmNoZXJzIGFyZSBwcm91 ZCBvZiBkaXNjb3ZlcmluZyBuZXcgdHlwZXMgb2YgdnVsbmVyYWJpbGl0aWVzCihUT1AgMTAgV2Vi IEhhY2tpbmcgVGVjaG5pcXVlcyAyMDEyKSBhbmQgb2YgdGhlICJUaGUgQmVzdCBTZXJ2ZXItU2lk ZSBCdWciCm5vbWluYXRpb24gYXQgQmxhY2tIYXQgMjAxMy4KCkVSUFNjYW4gZXhwZXJ0cyBwYXJ0 aWNpcGF0ZWQgYXMgc3BlYWtlcnMsIHByZXNlbnRlcnMsIGFuZCB0cmFpbmVycyBhdCA2MCsKcHJp bWUgaW50ZXJuYXRpb25hbCBzZWN1cml0eSBjb25mZXJlbmNlcyBpbiAyNSsgY291bnRyaWVzIGFj cm9zcyB0aGUKY29udGluZW50cyAoIGUuZy4gQmxhY2tIYXQsIFJTQSwgSElUQikgYW5kIGNvbmR1 Y3RlZCBwcml2YXRlIHRyYWluaW5ncyBmb3IKc2V2ZXJhbCBGb3J0dW5lIDIwMDAgY29tcGFuaWVz LgoKRVJQU2NhbiByZXNlYXJjaGVycyBjYXJyeSBvdXQgdGhlIEVBUy1TRUMgcHJvamVjdCB0aGF0 IGlzIGZvY3VzZWQgb24KZW50ZXJwcmlzZSBhcHBsaWNhdGlvbiBzZWN1cml0eSBhd2FyZW5lc3Mg YnkgaXNzdWluZyBhbm51YWwgU0FQIHNlY3VyaXR5CnJlc2VhcmNoZXMuCgpFUlBTY2FuIGV4cGVy dHMgd2VyZSBpbnRlcnZpZXdlZCBpbiBzcGVjaWFsaXplZCBpbmZvLXNlYyByZXNvdXJjZXMgYW5k CmZlYXR1cmVkIGluIG1ham9yIG1lZGlhIHdvcmxkd2lkZS4gQW1vbmcgdGhlbSB0aGVyZSBhcmUg UmV1dGVycywgWWFob28sIFNDCk1hZ2F6aW5lLCBUaGUgUmVnaXN0ZXIsIENJTywgUEMgV29ybGQs IERhcmtSZWFkaW5nLCBIZWlzZSwgQ2hpbmFieXRlLCBldGMuCgpPdXIgdGVhbSBjb25zaXN0cyBv ZiBoaWdobHktcXVhbGlmaWVkIHJlc2VhcmNoZXJzLCBzcGVjaWFsaXplZCBpbiB2YXJpb3VzCmZp ZWxkcyBvZiBjeWJlcnNlY3VyaXR5IChmcm9tIHdlYiBhcHBsaWNhdGlvbiB0byBJQ1MvU0NBREEg c3lzdGVtcyksCmdhdGhlcmluZyB0aGVpciBleHBlcmllbmNlIHRvIGNvbmR1Y3QgdGhlIGJlc3Qg U0FQIHNlY3VyaXR5IHJlc2VhcmNoLgoKMTEuIEFCT1VUIEVSUFNjYW4KCkVSUFNjYW4gaXMgdGhl IG1vc3QgcmVzcGVjdGVkIGFuZCBjcmVkaWJsZSBCdXNpbmVzcyBBcHBsaWNhdGlvbgpDeWJlcnNl Y3VyaXR5IHByb3ZpZGVyLiBGb3VuZGVkIGluIDIwMTAsIHRoZSBjb21wYW55IG9wZXJhdGVzIGds b2JhbGx5IGFuZAplbmFibGVzIGxhcmdlIE9pbCBhbmQgR2FzLCBGaW5hbmNpYWwsIFJldGFpbCBh bmQgb3RoZXIgb3JnYW5pemF0aW9ucyB0bwpzZWN1cmUgdGhlaXIgbWlzc2lvbi1jcml0aWNhbCBw cm9jZXNzZXMuIE5hbWVkIGFzIGFuIOKAmEVtZXJnaW5nIFZlbmRvcuKAmSBpbgpTZWN1cml0eSBi eSBDUk4sIGxpc3RlZCBhbW9uZyDigJxUT1AgMTAwIFNBUCBTb2x1dGlvbiBwcm92aWRlcnPigJ0g YW5kCmRpc3Rpbmd1aXNoZWQgYnkgMzArIG90aGVyIGF3YXJkcywgRVJQU2NhbiBpcyB0aGUgbGVh ZGluZyBTQVAgU0UgcGFydG5lciBpbgpkaXNjb3ZlcmluZyBhbmQgcmVzb2x2aW5nIHNlY3VyaXR5 IHZ1bG5lcmFiaWxpdGllcy4gRVJQU2NhbiBjb25zdWx0YW50cwp3b3JrIHdpdGggU0FQIFNFIGlu IFdhbGxkb3JmIHRvIGFzc2lzdCBpbiBpbXByb3ZpbmcgdGhlIHNlY3VyaXR5IG9mIHRoZWlyCmxh dGVzdCBzb2x1dGlvbnMuCgpFUlBTY2Fu4oCZcyBwcmltYXJ5IG1pc3Npb24gaXMgdG8gY2xvc2Ug dGhlIGdhcCBiZXR3ZWVuIHRlY2huaWNhbCBhbmQKYnVzaW5lc3Mgc2VjdXJpdHksIGFuZCBwcm92 aWRlIHNvbHV0aW9ucyBmb3IgQ0lTTydzIHRvIGV2YWx1YXRlIGFuZCBzZWN1cmUKU0FQIGFuZCBP cmFjbGUgRVJQIHN5c3RlbXMgYW5kIGJ1c2luZXNzLWNyaXRpY2FsIGFwcGxpY2F0aW9ucyBmcm9t IGJvdGgKY3liZXJhdHRhY2tzIGFuZCBpbnRlcm5hbCBmcmF1ZC4gQXMgYSBydWxlLCBvdXIgY2xp ZW50cyBhcmUgbGFyZ2UKZW50ZXJwcmlzZXMsIEZvcnR1bmUgMjAwMCBjb21wYW5pZXMgYW5kIE1T UHMsIHdob3NlIHJlcXVpcmVtZW50cyBhcmUgdG8KYWN0aXZlbHkgbW9uaXRvciBhbmQgbWFuYWdl IHNlY3VyaXR5IG9mIHZhc3QgU0FQIGFuZCBPcmFjbGUgbGFuZHNjYXBlcyBvbiBhCmdsb2JhbCBz Y2FsZS4KCldlIOKAmGZvbGxvdyB0aGUgc3Vu4oCZIGFuZCBoYXZlIHR3byBodWJzLCBsb2NhdGVk IGluIFBhbG8gQWx0byBhbmQgQW1zdGVyZGFtLAp0byBwcm92aWRlIHRocmVhdCBpbnRlbGxpZ2Vu Y2Ugc2VydmljZXMsIGNvbnRpbnVvdXMgc3VwcG9ydCBhbmQgdG8gb3BlcmF0ZQpsb2NhbCBvZmZp Y2VzIGFuZCBwYXJ0bmVyIG5ldHdvcmsgc3Bhbm5pbmcgMjArIGNvdW50cmllcyBhcm91bmQgdGhl IGdsb2JlLgoKCgpBZHJlc3MgVVNBOiAyMjggSGFtaWx0b24gQXZlbnVlLCBGbC4gMywgUGFsbyBB bHRvLCBDQS4gOTQzMDEKClBob25lOiA2NTAuNzk4LjUyNTUKClR3aXR0ZXI6IEBlcnBzY2FuCgpT Y29vcC1pdDogQnVzaW5lc3MgQXBwbGljYXRpb24gU2VjdXJpdHkKCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClNlbnQgdGhyb3VnaCB0aGUgRnVsbCBEaXNj bG9zdXJlIG1haWxpbmcgbGlzdApodHRwczovL25tYXAub3JnL21haWxtYW4vbGlzdGluZm8vZnVs bGRpc2Nsb3N1cmUKV2ViIEFyY2hpdmVzICYgUlNTOiBodHRwOi8vc2VjbGlzdHMub3JnL2Z1bGxk aXNjbG9zdXJlLw==