SAP security note 1893556, “Directory traversal in SAP Sybase ASE”, is a program error note released on 10.09.2013. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
SAP Sybase ASE on Microsoft Windows contains a vulnerability through which an attacker can potentially write arbitrary files to the remote server, possibly corrupting data or altering system behavior.
Solution
This issue has been fixed in the following SAP Sybase ASE versions on Microsoft Windows:
- SAP Sybase ASE 15.7 SP100
- SAP Sybase ASE 15.7 ESD#4
- SAP Sybase ASE 15.5 ESD#5.2
- SAP Sybase ASE 15.0.3 ESD#4.2
Install the fixed SAP Sybase ASE versions most appropriate for your production environments.
Reason and prerequisites
SAP Sybase ASE on Microsoft Windows fails to correctly validate the path to which a user-submitted file is written. As a result, an attacker can potentially overwrite data in the remote system.
CVSS
Score 6.1 Vector: AV:N/AC:H/AU:S/C:C/I:P/A:P
Affected components
- SY_ASE 15.0
- SY_ASE 15.5
- SYBASE_ASE_SERVER 15.7
Full note on SAP: SAP Support Launchpad note 1893556
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].