Directory traversal in BC-CTS-ORG, SAP security note 1644746

SAP security note 1644746, "Directory traversal in BC-CTS-ORG", is a program error note released on 14.02.2012. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Directory traversal in BC-CTS-ORG contains a vulnerability through which an attacker can potentially write arbitrary files to the remote server, possibly corrupting data or altering system behavior.

Solution

Implement this note by SNOTE or import the responsible support package.

If you implement the note by SNOTE, there are the following manual steps for release 6.20 and 6.40 only:

• Create a new message with transaction SE91.
• Use PU 620 ‘Could not export request &1’ and hook the self-explained flag.

Reason and prerequisites

Directory traversal in BC-CTS-ORG fails to correctly validate the path to which a user-submitted file is written. As a result, an attacker can potentially overwrite data in the remote system.

CVSS

Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P

Affected components

• SAP_BASIS: From 46C to 46C
• SAP_BASIS: From 620 to 640
• SAP_BASIS: From 700 to 702
• SAP_BASIS: From 710 to 730
• SAP_BASIS: From 731 to 731