Directory Traversal in Report RSDBGENA, SAP security note 1514385

SAP security note 1514385, "Directory Traversal in Report RSDBGENA", is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Report RSDBGENA contains a vulnerability through which a malicious user can potentially overwrite arbitrary files on the remote server, possibly corrupting data or altering system behavior.

Solution

The referenced correction instruction restricts the choice of the filename to RSDBGENA<suffix>.txt where <suffix> can be entered by the user. <suffix> can contain uppercase letters, digits, and "_" (underscore). The path is restricted to paths accessible by the work process.

Reason and prerequisites

RSDBGENA fails to restrict the path and filename a logging file is written to. Through this, an attacker can potentially overwrite data on the remote system.

References

• Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• SAP_APPL versions 31I, 40B, 45B
• SAP_BASIS versions 46B to 46D, 610 to 640, 700 to 730, 72L