Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Update 1 to Security Note 1511617, SAP security note 1538366

SAP Note 1538366
High priority

SAP security note 1538366, "Update 1 to Security Note 1511617", is a program error note released on 12.01.2011. Below are the symptom and SAP recommended solution.

ComponentFinancial Accounting > Bank-Related Accounting > Payment Transactions > payment forms
CategoryProgram error
PriorityCorrection with high priority
StatusReleased for Customer
Released on12.01.2011

Description

Symptom

The file cannot be downloaded in transaction FDTA. The system issues the error message "Logical file name … does not exist" (SG 807). The logical file name is not defined.

This message is issued in transactions FDTA and FBPM, and in the reports SAPFPAYM, RFFOD__L, RFFOD__U, and RFFOD__Z after you implement Note 1511617.

Or:

For Release 46C and lower: One of the programs terminates with the message MESSAGE_TYPE_UNKNOWN.

Solution

  • Implement the source code corrections provided in this note.
  • Create the logical file name as described in Note 1511617.

Reason and prerequisites

This issue is caused by Note 1511617.

Side effects

Solves side effects caused by 1511617 – FI-BL-PT-FO: Possible directory traversal. Causes side effects in 1541805 – RFFOD__Z: CX_SY_DYN_CALL_PARAM_NOT_FOUND.

References

Full note on SAP: SAP Support Launchpad note 1538366

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More