VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 15, 2004· Updated Jun 16, 2026

CVE-2003-1038

CVE-2003-1038

Description

The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.

Affected products

2
  • SAP/Internet Transaction Server2 versions
    cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*range: <=4.6_pl463
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.