Directory traversal in ABAP Syntax Checking, SAP security note 1580874

SAP Note 1580874
High priority

SAP security note 1580874, “Directory traversal in ABAP Syntax Checking,” is a program error note released on July 12, 2011. Below are the symptom, SAP recommended solution and the affected software components.

CategoryProgram error

PriorityCorrection with high priority

StatusReleased for Customer

Released onJuly 12, 2011

Description

Symptom

ABAP Syntax Checking contains a vulnerability that allows a malicious user to potentially write arbitrary files on the remote server. This can lead to data corruption or alteration of system behavior.

Solution

Apply the support package mentioned in this note or follow the respective correction instructions.

References

Automatic checks for security notes using RSECNOTE (outdated)

Affected components

SAP_BASIS 46B to 46D
SAP_BASIS 610 to 640
SAP_BASIS 700 to 702
SAP_BASIS 710 to 730

Full note on SAP: SAP Support Launchpad note 1580874

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Directory Traversal #ABAP Syntax Checking #SAP_BASIS #Arbitrary File Write