Mark Litchfield has reported a vulnerability in SAP DB, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within waHTTP.exe and can be exploited to cause a stack-based buffer overflow via a specially crafted HTTP request to default port 9999/TCP.

Successful exploitation allows execution of arbitrary code, but requires that SAP DB is installed to run on its own web server.

Solution
Update to the latest version.

Provided and/or discovered by
Mark Litchfield, NGSSoftware

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-sap-db-web-server-stack-overflow/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers