Directory traversal in function module STATUS_EXP from SDBM, SAP security note 1708116

SAP security note 1708116, “Directory traversal in function module STATUS_EXP from SDBM”, was released on 10.07.2012. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Directory traversal with write authorization: The function group SDBM contains a vulnerability that allows an attacker to write arbitrary files to the remote server, potentially corrupting data or altering system behavior.

Solution

• Check for module presence: Verify if the module STATUS_EXP is present in your system. This might occur if an incremental migration was performed using transaction IMIG.
• Import requests: If STATUS_EXP is present, import the transport requests BIOK018056.SAR (4 KB) and LMXK000412.SAR (6 KB) to deactivate the relevant module. You can ignore any generation errors that may occur during this process.

Reason and prerequisites

Directory traversal with write or read/write authorization: The function group SDBM does not correctly validate the path for user-submitted files, enabling attackers to overwrite data in the remote system.

Affected components

• SAP_APPL: 45B to 45B
• SAP_BASIS: 46A to 46D, 610 to 640, 700 to 702, 710 to 730, 731 to 731