SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 63449: The METALIB procedure contains a security vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: A database management system (DBMS) library vulnerability has been identified in the METALIB procedure. Under certain circumstances, PROC METALIB might display the SAS002 encoded password for a DBMS library.

Potential Impact: The password could be compromised by an attacker.

Click the Hot Fix tab in this note to access the hot fix for this issue.

 



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemBase SASz/OS9.4_M39.4_M69.4 TS1M39.4 TS1M6
z/OS 64-bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft® Windows® for x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8 Enterprise 32-bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8 Enterprise x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8 Pro 32-bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8 Pro x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8.1 Enterprise 32-bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8.1 Enterprise x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8.1 Pro 32-bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 8.1 Pro x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows 109.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows Server 20089.4_M39.4 TS1M3
Microsoft Windows Server 2008 R29.4_M39.4 TS1M3
Microsoft Windows Server 2008 for x649.4_M39.4 TS1M3
Microsoft Windows Server 2012 Datacenter9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows Server 2012 R2 Datacenter9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows Server 2012 R2 Std9.4_M39.4_M69.4 TS1M39.4 TS1M6
Microsoft Windows Server 2012 Std9.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Enterprise 32 bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Enterprise x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Home Premium 32 bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Home Premium x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Professional 32 bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Professional x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Ultimate 32 bit9.4_M39.4_M69.4 TS1M39.4 TS1M6
Windows 7 Ultimate x649.4_M39.4_M69.4 TS1M39.4 TS1M6
64-bit Enabled AIX9.4_M39.4_M69.4 TS1M39.4 TS1M6
64-bit Enabled Solaris9.4_M39.4_M69.4 TS1M39.4 TS1M6
HP-UX IPF9.4_M39.4_M69.4 TS1M39.4 TS1M6
Linux for x649.4_M39.4_M69.4 TS1M39.4 TS1M6
Solaris for x649.4_M39.4_M69.4 TS1M39.4 TS1M6
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.