Dynamic call of a function in SHOW_XDB_LOGFILE_DBA, SAP security note 1881914

SAP security note 1881914, "Dynamic call of a function in SHOW_XDB_LOGFILE_DBA", was released on 24.09.2013. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Within function module SHOW_XDB_LOGFILE_DBA, another function is called dynamically. The called function stems from a table modified by a customer.

Solution

The function module SHOW_XDB_LOGFILE_DBA is only used in transaction DB24. Since the transaction has been marked as obsolete for years (SAP Note 413904), the relevant source code has been removed. This was accomplished with the following Support Packages:

• SAP_BASIS 700 – SAPKB70029
• SAP_BASIS 701 – SAPKB70114
• SAP_BASIS 702 – SAPKB70214
• SAP_BASIS 710 – SAPKB71017
• SAP_BASIS 711 – SAPKB71112
• SAP_BASIS 720 – SAPKB72008
• SAP_BASIS 730 – SAPKB73010
• SAP_BASIS 731 – SAPKB73109
• SAP_BASIS 740 – SAPKB74003

Reason and prerequisites

There is a security risk.

Affected components

• SAP_BASIS (700 to 702)
• SAP_BASIS (710 to 730)
• SAP_BASIS (731, 740+)