High
SAP security note 1480284, “Directory Traversal in ABAP runtime analysis (SE30)”, is released on October 18, 2011. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
This security vulnerability affects the ABAP runtime analysis (SE30) in SAP Basis. An error in SE30 allows a malicious user to perform directory traversal, potentially enabling the writing of arbitrary files on the remote server. This can lead to data corruption or unauthorized alteration of system behavior.
Solution
To address this issue, apply the specified Support Package for your SAP_BASIS version. Follow these steps:
- Import the Support Package using SNOTE.
- Review Correction Instructions: Detailed instructions are available here.
Reason and prerequisites
The ABAP runtime analysis (SE30) does not properly validate the file path for user-submitted files. This oversight allows attackers to overwrite data on the remote system by exploiting the directory traversal vulnerability.
References
- Security Note 1554751 – provides an update to this issue.
Affected components
- SAP_BASIS – Versions 46C, 620 to 640, 700 to 730
Full note on SAP: SAP Support Launchpad note 1480284
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].