Mariano Nuñez Di Croce has reported a vulnerability in the SAP J2EE engine, which can be exploited by malicious people to bypass certain security restrictions and potentially compromise a vulnerable system.

The vulnerability is caused due to an unspecified error in the J2EE telnet interface and can be exploited to replay authentication credentials when authenticating to other services (e.g. SMB).

The vulnerability is reported in the following versions:
* SAP-JEECOR 6.40
* SAP-JEECOR 7.00
* SAP-JEECOR 7.01
* SAP-JEECOR 7.02
* SERVERCORE 7.10
* SERVERCORE 7.11
* SERVERCORE 7.20
* SERVERCORE 7.30

Solution
Patches are available via SAP note 1425847.
Further details available to Secunia VIM customers

Provided and/or discovered by
Mariano Nuñez Di Croce, Onapsis

Changelog
Further details available to Secunia VIM customers

Original Advisory
Onapsis:
http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html

SAP (note 1425847):
http://service.sap.com/sap/support/notes/1425847

Deep Links
Links available to Secunia VIM customers