Other nomination
Exploiting Inter-Process Communication in SAP's HTTP Server
SAP's Internet Communication Manager moves HTTP messages to its Java/ABAP backend through fixed-size shared-memory buffers. Oversized requests and a use-after-free on those buffers let an unauthenticated attacker desynchronise the pipeline, smuggle requests, steal other users' sessions and cookies, poison the internal cache, and reach memory corruption for code execution.
Record
- Researcher
- Martin Doyhenard
- Format
- Whitepaper
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Martin Doyhenard, first published at the original source. Preserved copies are kept so the citation survives its host.