SAP Security Note
High priority
SAP security note 1488424, "Not allowed symbols in trx. IBIP", is a program error note released on 14.12.2010. Below are the symptom and the SAP recommended solution.
Description
Symptom
It is possible to use not allowed symbols, like ‘..’, ‘/’, ‘\\’, etc., in the transaction IBIP in the file name field.
Solution
This note is OBSOLETE; the new note 1530895 provides a comprehensive solution for the mentioned issue. Please implement the note 1530895!
Reason and prerequisites
Program error
Full note on SAP: SAP Support Launchpad note 1488424
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
