cve-2014-0984
Vulnerability from cvelistv5
Published
2014-04-17 14:00
Modified
2024-08-06 09:34
Severity ?
Summary
The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack.
References
cve@mitre.orghttp://scn.sap.com/docs/DOC-8218
cve@mitre.orghttp://www.coresecurity.com/advisories/sap-router-password-timing-attack
cve@mitre.orghttp://www.exploit-db.com/exploits/32919
cve@mitre.orghttp://www.securityfocus.com/archive/1/531854/100/0/threaded
cve@mitre.orghttps://service.sap.com/sap/support/notes/1986895
af854a3a-2127-422b-91ae-364da2661108http://scn.sap.com/docs/DOC-8218
af854a3a-2127-422b-91ae-364da2661108http://www.coresecurity.com/advisories/sap-router-password-timing-attack
af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/32919
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/531854/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108https://service.sap.com/sap/support/notes/1986895
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T09:34:40.409Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://service.sap.com/sap/support/notes/1986895",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.coresecurity.com/advisories/sap-router-password-timing-attack",
               },
               {
                  name: "20140416 [CORE-2014-0003] - SAP Router Password Timing Attack",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/531854/100/0/threaded",
               },
               {
                  name: "32919",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "http://www.exploit-db.com/exploits/32919",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://scn.sap.com/docs/DOC-8218",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2014-04-15T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-10T20:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://service.sap.com/sap/support/notes/1986895",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.coresecurity.com/advisories/sap-router-password-timing-attack",
            },
            {
               name: "20140416 [CORE-2014-0003] - SAP Router Password Timing Attack",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/531854/100/0/threaded",
            },
            {
               name: "32919",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "http://www.exploit-db.com/exploits/32919",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://scn.sap.com/docs/DOC-8218",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2014-0984",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://service.sap.com/sap/support/notes/1986895",
                     refsource: "CONFIRM",
                     url: "https://service.sap.com/sap/support/notes/1986895",
                  },
                  {
                     name: "http://www.coresecurity.com/advisories/sap-router-password-timing-attack",
                     refsource: "MISC",
                     url: "http://www.coresecurity.com/advisories/sap-router-password-timing-attack",
                  },
                  {
                     name: "20140416 [CORE-2014-0003] - SAP Router Password Timing Attack",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/531854/100/0/threaded",
                  },
                  {
                     name: "32919",
                     refsource: "EXPLOIT-DB",
                     url: "http://www.exploit-db.com/exploits/32919",
                  },
                  {
                     name: "http://scn.sap.com/docs/DOC-8218",
                     refsource: "CONFIRM",
                     url: "http://scn.sap.com/docs/DOC-8218",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2014-0984",
      datePublished: "2014-04-17T14:00:00",
      dateReserved: "2014-01-07T00:00:00",
      dateUpdated: "2024-08-06T09:34:40.409Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      fkie_nvd: {
         configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:router:710:029:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B4FF6BF-F2F0-4893-B5A1-2E55D56BA80D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:router:720:411:*:*:*:*:*:*\", \"matchCriteriaId\": \"62B0C1B5-600E-4469-8837-F475E83F1F88\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:router:721:117:*:*:*:*:*:*\", \"matchCriteriaId\": \"DAA327C6-4FE3-4BE1-A0D4-1035201AC2FF\"}]}]}]",
         descriptions: "[{\"lang\": \"en\", \"value\": \"The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n passwordCheck en SAP Router 721 patch 117, 720 patch 411, 710 patch 029, y anteriores termina la validaci\\u00f3n de una contrase\\u00f1a de entrada Route Permission Table al encontrarse con el primer car\\u00e1cter incorrecto. Esto permite que los atacantes remotos obtengan contrase\\u00f1as mediante un ataque de fuerza bruta que depende de diferencias en la sincronizaci\\u00f3n en las respuestas a adivinaciones incorrectas de contrase\\u00f1a. Esto tambi\\u00e9n se conoce como ataque de sincronizaci\\u00f3n de canal lateral.\"}]",
         id: "CVE-2014-0984",
         lastModified: "2024-11-21T02:03:09.590",
         metrics: "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:N/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
         published: "2014-04-17T14:55:08.857",
         references: "[{\"url\": \"http://scn.sap.com/docs/DOC-8218\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.coresecurity.com/advisories/sap-router-password-timing-attack\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.exploit-db.com/exploits/32919\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/archive/1/531854/100/0/threaded\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://service.sap.com/sap/support/notes/1986895\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://scn.sap.com/docs/DOC-8218\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.coresecurity.com/advisories/sap-router-password-timing-attack\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.exploit-db.com/exploits/32919\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/531854/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://service.sap.com/sap/support/notes/1986895\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
         sourceIdentifier: "cve@mitre.org",
         vulnStatus: "Modified",
         weaknesses: "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-264\"}]}]",
      },
      nvd: "{\"cve\":{\"id\":\"CVE-2014-0984\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2014-04-17T14:55:08.857\",\"lastModified\":\"2024-11-21T02:03:09.590\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack.\"},{\"lang\":\"es\",\"value\":\"La función passwordCheck en SAP Router 721 patch 117, 720 patch 411, 710 patch 029, y anteriores termina la validación de una contraseña de entrada Route Permission Table al encontrarse con el primer carácter incorrecto. Esto permite que los atacantes remotos obtengan contraseñas mediante un ataque de fuerza bruta que depende de diferencias en la sincronización en las respuestas a adivinaciones incorrectas de contraseña. Esto también se conoce como ataque de sincronización de canal lateral.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:router:710:029:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B4FF6BF-F2F0-4893-B5A1-2E55D56BA80D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:router:720:411:*:*:*:*:*:*\",\"matchCriteriaId\":\"62B0C1B5-600E-4469-8837-F475E83F1F88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:router:721:117:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAA327C6-4FE3-4BE1-A0D4-1035201AC2FF\"}]}]}],\"references\":[{\"url\":\"http://scn.sap.com/docs/DOC-8218\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.coresecurity.com/advisories/sap-router-password-timing-attack\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.exploit-db.com/exploits/32919\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/531854/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://service.sap.com/sap/support/notes/1986895\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://scn.sap.com/docs/DOC-8218\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.coresecurity.com/advisories/sap-router-password-timing-attack\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.exploit-db.com/exploits/32919\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/531854/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://service.sap.com/sap/support/notes/1986895\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.