Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Transporting a file from the enqueue server, SAP security note 959877

SAP Note 959877
SAP Security Note
Low priority

SAP security note 959877, "Transporting a file from the enqueue server", is a consulting note released on 08.10.2009. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBC-CST-EQ (Basis Components > Client/Server Technology > Enqueue)
CategoryConsulting
PriorityLow priority
TypeSAP Security Note
Version5
StatusReleased for Customer
Released on08.10.2009
LanguageEnglish

Description

Symptom

Files can be transferred across the network using the standalone enqueue server. Although this server is usually protected by a firewall, there is a risk that confidential data could be accessed. The file transfer feature therefore poses a threat to security.

Solution

This feature is deactivated in the enqueue server using the following patch levels:

  • 6.40: Patch Level 136
  • 7.00: Patch Level 66

See Note 994630 for information regarding where on SAP Service Marketplace you can find patches for the standalone enqueue server.

References

Affected components

  • SAP_BASIS 46A to 46D
  • SAP_BASIS 610 to 640
  • SAP_BASIS 700

Full note on SAP: SAP Support Launchpad note 959877

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More