CVE-2009-4603

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-01-12 · updated 2026-06-16

Description

Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Application Server 6.x and 7.x, allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted request. NOTE: some of these details are obtained from third party information.

Affected products

SAP Startup Service: 6.40, 7.00, 7.01, 7.10, 7.11, 7.20

References

http://secunia.com/advisories/37684
http://www.cybsec.com/vuln/CYBSEC_SAP_sapstartsrv_DoS.pdf
http://www.securityfocus.com/bid/37286
http://www.securitytracker.com/id?1023319
https://service.sap.com/sap/support/notes/1302231
http://secunia.com/advisories/37684
http://www.cybsec.com/vuln/CYBSEC_SAP_sapstartsrv_DoS.pdf
http://www.securityfocus.com/bid/37286
http://www.securitytracker.com/id?1023319
https://service.sap.com/sap/support/notes/1302231

Get alerted when CVE-2009-4603 or the next vulnerability affects your stack