CVE-2013-1592

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilitiesExploit, Third Party Advisory
http://www.exploit-db.com/exploits/24511Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/57956Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1028148Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/82064Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1592Third Party Advisory, VDB Entry
http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilitiesExploit, Third Party Advisory
http://www.exploit-db.com/exploits/24511Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/57956Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1028148Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/82064Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1592Third Party Advisory, VDB Entry

Timeline

Published: Jan 23, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-15937.5A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, a CVE-2013-15947.5An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd pa CVE-2013-15959.8A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization heade CVE-2013-15965.3An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554 CVE-2013-15976.5A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let CVE-2013-15988.8A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary CVE-2013-15999.8A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/CVE-2013-16005.3An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2 CVE-2013-16015.3An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video strea CVE-2013-16027.5An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5 CVE-2013-16035.3An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-741 CVE-2013-16045.0Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary fi