Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Directory Traversal in ABAP-Debugger-Utilities, SAP security note 1518682

SAP Note 1518682SAP Security NoteHigh priority

SAP security note 1518682, "Directory Traversal in ABAP-Debugger-Utilities", is a program error note released on 14.12.2010. Below are the symptom, reason and prerequisites, SAP recommended solution and references.

ComponentBasis Components > ABAP Runtime Environment – ABAP Language Issues Only > Syntax, Compiler, Runtime
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version5
StatusReleased for Customer
Released on14.12.2010
LanguageEnglish

Description

Symptom

Parts of the external ABAP debugger utilities contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.

Solution

Please install the support package mentioned in this note, or apply the correction instruction.

Reason and prerequisites

Parts of the external ABAP debugger utilities fail to correctly validate the path a user-submitted file is written to. Through this, an attacker can potentially overwrite data on the remote system.

References

Full note on SAP: SAP Support Launchpad note 1518682

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#ABAP Runtime Environment#Syntax, Compiler, Runtime#ABAP Debugger#Directory Traversal

Explore More