SAP Web Application Server - Information Disclosure via RFC_SYSTEM_INFO RfcCallReceive Request
SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than CVE-2003-0747.