SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 53128: A security vulnerability exists in the SAS® Stored Process Server

DetailsHotfixAboutRate It

A security vulnerability that can adversely affect metadata has been detected in the SAS Stored Process Server.

Click the Hot Fix tab in this note to access the hot fix for this issue.

After you apply the hot fix:

  1. Locate the sasv9_usermods.cfg file for the SAS Stored Process Server. This file resides in SAS-configuration-directory/Lev1/SASApp/StoredProcessServer/.
  2. In the sasv9_usermods.cfg file, add the following line:
    -SET RESTRICTWS "True"

Note: This hot fix also disables the ability to validate the SAS Stored Process Server when you use SAS® Management Console.

Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Integration TechnologiesMicrosoft Windows Server 2012 R2 Datacenter9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2012 Datacenter9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2008 for x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2008 R29.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 20089.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2003 for x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2003 Standard Edition9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2003 Enterprise Edition9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2003 Datacenter Edition9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8.1 Pro 32-bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8.1 Pro9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8.1 Enterprise x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8.1 Enterprise 32-bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8 Pro x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8 Pro 32-bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8 Enterprise x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows 8 Enterprise 32-bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft® Windows® for x649.3_M29.3_M29.3 TS1M29.3 TS1M2
z/OS9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2012 R2 Std9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows Server 2012 Std9.3_M29.3_M29.3 TS1M29.3 TS1M2
Microsoft Windows XP Professional9.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Enterprise 32 bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Enterprise x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Home Premium 32 bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Home Premium x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Professional 32 bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Professional x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Ultimate 32 bit9.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows 7 Ultimate x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows Vista9.3_M29.3_M29.3 TS1M29.3 TS1M2
Windows Vista for x649.3_M29.3_M29.3 TS1M29.3 TS1M2
64-bit Enabled AIX9.3_M29.3_M29.3 TS1M29.3 TS1M2
64-bit Enabled HP-UX9.3_M29.3_M29.3 TS1M29.3 TS1M2
64-bit Enabled Solaris9.3_M29.3_M29.3 TS1M29.3 TS1M2
HP-UX IPF9.3_M29.3_M29.3 TS1M29.3 TS1M2
Linux9.3_M29.3_M29.3 TS1M29.3 TS1M2
Linux for x649.3_M29.3_M29.3 TS1M29.3 TS1M2
Solaris for x649.3_M29.3_M29.3 TS1M29.3 TS1M2
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.