SAP Security Note
High priority
SAP security note 1504445, "Directory Traversal in the RCCF engines", is released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The Control and Communication Framework contains a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Solution
Correct the source code by implementing the attached correction instructions for SCM Basis as of Release 5.1.
Reason and prerequisites
The RCCF fails to correctly validate the path a user-submitted file is written to. This means that an attacker can potentially overwrite data on the remote system.
References
This note refers to
Affected components
- SCM_BASIS: Versions 510, 700, 701
Full note on SAP: SAP Support Launchpad note 1504445
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].