SAP Security Note
High priority
SAP security note 1628110, "Security issues fixed in SAP HANA Revision 15", is a release planning information note released on September 13, 2011. Below are the symptom and solution.
Description
Symptom
Several security vulnerabilities were discovered and subsequently fixed in revision 15 of SAP HANA.
Directory Traversal: SAP HANA contains a vulnerability that allows a malicious user to write specific files on the remote server, potentially corrupting data or altering system behavior. This issue arises because the component fails to correctly validate the file path used when referencing files on the remote server. As a result, an attacker can direct the program to access unintended files, altering their contents.
Memory Corruption: A malicious user can remotely exploit SAP HANA to terminate processes manually. This vulnerability is caused by memory corruption, leading the process to attempt to read outside its memory space and triggering a memory protection fault. Consequently, the system terminates the affected process, rendering the application unusable until it is restarted.
Solution
Update your SAP HANA to Revision 15 or higher.
Full note on SAP: SAP Support Launchpad note 1628110
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
