CVE-2007-1914

The RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information (external RFC server configuration data) via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.

• http://secunia.com/advisories/24722Vendor Advisory
• http://securityreason.com/securityalert/2538
• http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_START_PROGRAM_RFC_Function_Multiple_Vulnerabilities.pdfPatch
• http://www.securityfocus.com/archive/1/464678/100/0/threaded
• http://www.securityfocus.com/bid/23313
• http://www.vupen.com/english/advisories/2007/1270
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33422
• http://secunia.com/advisories/24722Vendor Advisory
• http://securityreason.com/securityalert/2538
• http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_START_PROGRAM_RFC_Function_Multiple_Vulnerabilities.pdfPatch
• http://www.securityfocus.com/archive/1/464678/100/0/threaded
• http://www.securityfocus.com/bid/23313
• http://www.vupen.com/english/advisories/2007/1270
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33422

Published

Apr 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1908PHP file inclusion vulnerability in php121db.php in PHP121 I…
• CVE-2007-1909SQL injection vulnerability in login.php in Ryan Haudenschil…
• CVE-2007-1910Buffer overflow in wwlib.dll in Microsoft Word 2007 allows r…
• CVE-2007-1911Multiple unspecified vulnerabilities in Microsoft Word 2007 …
• CVE-2007-1912Heap-based buffer overflow in Microsoft Windows allows user-…
• CVE-2007-1913The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library …
• CVE-2007-1915Buffer overflow in the RFC_START_PROGRAM function in the SAP…
• CVE-2007-1916Buffer overflow in the RFC_START_GUI function in the SAP RFC…
• CVE-2007-1917Buffer overflow in the SYSTEM_CREATE_INSTANCE function in th…
• CVE-2007-1918The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Libr…
• CVE-2007-1919Cross-site scripting (XSS) vulnerability in index.php in Ari…
• CVE-2007-1920SQL injection vulnerability in index.php in the aktualnosci …