SAP Security Note
Low priority
SAP security note 959877, "Transporting a file from the enqueue server", is a consulting note released on 08.10.2009. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Files can be transferred across the network using the standalone enqueue server. Although this server is usually protected by a firewall, there is a risk that confidential data could be accessed. The file transfer feature therefore poses a threat to security.
Solution
This feature is deactivated in the enqueue server using the following patch levels:
- 6.40: Patch Level 136
- 7.00: Patch Level 66
See Note 994630 for information regarding where on SAP Service Marketplace you can find patches for the standalone enqueue server.
References
Affected components
- SAP_BASIS 46A to 46D
- SAP_BASIS 610 to 640
- SAP_BASIS 700
Full note on SAP: SAP Support Launchpad note 959877
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].



