Subsequent corr. Directory Traversal in foreign trade, SAP security note 1526997

SAP Note 1526997
SAP Security Note
Medium priority

SAP security note 1526997, "Subsequent corr.: Directory Traversal in foreign trade", is a program error note released on 02.03.2011. Below are the symptom, SAP recommended solution and the affected software components.

ComponentSales and Distribution > Foreign Trade (not Global Trade Service related) > Declarations to Authorities Export

CategoryProgram error

PriorityCorrection with medium priority

TypeSAP Security Note

Version3

StatusReleased for Customer

Released on02.03.2011

LanguageEnglish

Description

Symptom

This is a subsequent correction for Note 1510642: in transaction FILE, the definition of the data format is missing for the new logical file names FT_BAFA_FILENAME and FT_DECLARATION_FILENAME. See Note 1510642 for further details.

Solution

Use transaction FILE to set the Data format parameter to the value 'DIR' (check directory) for the logical file names FT_BAFA_FILENAME and FT_DECLARATION_FILENAME. Save your changes.

References

This note refers to

Affected components

SAP_APPL 470
SAP_APPL 500
SAP_APPL 600
SAP_APPL 602
SAP_APPL 603
SAP_APPL 604
SAP_APPL 605

Full note on SAP: SAP Support Launchpad note 1526997

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Path traversal #DATASET #FT_BAFA_FILENAME #FT_DECLARATION_FILENAME #FT_ROOT_BAFA