SAP security note 673279, “Central Note for EP 5.0 SP 5 Patch 3 Hotfixes”, is a note. Below are the symptom and SAP recommended solution.
Description
Symptom
You need to install a hotfix for EP5 SP5 Patch 3 to address various issues and improve system stability.
Solution
The latest hotfix for EP5 Support Package 5 Patch 3 is available and includes all previously released hotfixes. You can download the hotfix collection from the SAP Support Patches page.
Installation steps: extract EP5053HF_n.zip to a temporary directory, then execute Setup.exe from the extracted files and follow the on-screen instructions to complete the installation.
Post-installation, verify the installed hotfix version by checking the registry key HKEY_LOCAL_MACHINE\SOFTWARE\SapPortals\EIP\Hotfixes.
Important for clustered environments: ensure that all server nodes are upgraded with the latest hotfix. Update the lockserver by copying the following files from an upgraded portal node to the lockserver node’s ep5lockserver directory: sl.jar and spl.jar from <irj>/WEB-INF/plugins/portal/services/pcdmanager/lib; pcdcore.jar and LockServer.jar from <irj>/WEB-INF/plugins/portal/services/pcdmanager/lib/private. If available, also copy jssf.dll, libsapu16.dll, slicslib.dll to %windir%\system32\, and LASVerify.pse and sapsecu.dll to C:\Winnt\System32\. After copying the necessary files, restart all server nodes to apply the changes.
SAP Notes included in this hotfix collection include, among others:
- 673025 – Personalize page link appears for guest users in the header
- 661804 – New HRNL tag to create signed URL’s for the iView server
- 571929 – Html Business For Java (Htmlb)
- 640923 – EP5: Active Directory Server 2003 as portal LDAP directory
Reason and prerequisites
Ensure that EP5 SP5 Patch 3 is already installed on your system. It is recommended to create a backup image of the server running Enterprise Portal before proceeding with the hotfix installation.
References
This document refers to several other SAP Notes for additional information and related issues, such as:
Full note on SAP: SAP Support Launchpad note 673279
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
