CVE-2003-0747
published 2003-10-20CVE-2003-0747: wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory…
PriorityP416medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
2.84%
85.0th percentile
wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | internet_transaction_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP Base CVE-2003-0747 information disclosure (XFDB-39997)
vuldb·2026-04-28·CVSS 5.0
CVE-2006-6010 [MEDIUM] SAP Base CVE-2003-0747 information disclosure (XFDB-39997)
A vulnerability, which was classified as problematic, has been found in SAP Base CVE-2003-0747. This affects an unknown function. This manipulation causes information disclosure.
The identification of this vulnerability is CVE-2006-6010. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
GHSA
GHSA-66r7-7rjm-h7pp: SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive
ghsa_unreviewed·2022-05-01·CVSS 5.0
CVE-2006-6010 [MEDIUM] GHSA-66r7-7rjm-h7pp: SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive
SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than CVE-2003-0747.
GHSA
GHSA-qv28-xgx9-52c7: wgate
ghsa_unreviewed·2022-04-29
CVE-2003-0747 [MEDIUM] GHSA-qv28-xgx9-52c7: wgate
wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.
No detection rules found.
Exploit-DB
SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure
exploitdb·2003-08-30
CVE-2003-0747 SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure
SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure
---
source: https://www.securityfocus.com/bid/8515/info
A vulnerability has been discovered in SAP Internet Transaction Server (SITS)that could allow an attacker to obtain sensitive information. The problem occurs due to SITS disclosing sensitive local filesystem information when handling malformed requests. Specifically, an attacker who submits a request containing invalid values will receive an error response message in return. This response may contain sensitive information.
http://www.server.name/scripts/wgate/pbw2/!?
with params:
~runtimemode=DM&
~language=en&
~theme=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&
Exploit-DB
IBM AIX 4.3.x/5.1 - 'LSMCODE' Environment Variable Local Buffer Overflow
exploitdb·2003-06-01
CVE-2002-0747 IBM AIX 4.3.x/5.1 - 'LSMCODE' Environment Variable Local Buffer Overflow
IBM AIX 4.3.x/5.1 - 'LSMCODE' Environment Variable Local Buffer Overflow
---
source: https://www.securityfocus.com/bid/7871/info
Insufficient bounds checking in the lsmcode utility will allow locally based attackers to cause memory to be corrupted with attacker-supplied data. As a result, it is possible to exploit this condition to execute arbitrary attacker-supplied instructions with elevated privileges.
#!/usr/bin/perl
# FileName: x_lsmcode_aix4x.pl
# Exploit lsmcode of Aix4.3.3 to get a uid=0 shell.
# Tested : on Aix4.3.3.Mybe can work on other versions.
# Author : [email protected]
# Site : www.xfocus.org www.xfocus.net
# Date : 2003-6-1
# Announce: use as your owner risk!
$CMD="/usr/sbin/lsmcode";
$_=`/usr/bin/oslevel`;
$XID="\x03";
$UID="\x97";
print "\n\nExploit $CMD for A
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.htmlhttp://www.securityfocus.com/bid/8515https://exchange.xforce.ibmcloud.com/vulnerabilities/13063http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.htmlhttp://www.securityfocus.com/bid/8515https://exchange.xforce.ibmcloud.com/vulnerabilities/13063
2003-10-20
Published