SAP security note 1572340, "Directory traversal in PSE function modules", is a program error note released on 09.08.2011. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The function modules SSFPSE_DOWNLOAD and SSFPSE_UPLOAD contain a vulnerability through which a malicious user can potentially read, write, or delete arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Solution
The correction restricts the function modules to PSE files. In addition, usage of these function modules is restricted to administrators.
Reason and prerequisites
The function modules SSFPSE_DOWNLOAD and SSFPSE_UPLOAD fail to correctly validate the input parameters. As a result, a malicious user can potentially direct the program to an arbitrary other file in the system.
References
This note refers to
Affected components
- SAP_BASIS 610 to 640
- SAP_BASIS 700 to 702
- SAP_BASIS 710 to 730
Full note on SAP: SAP Support Launchpad note 1572340
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
