SAP Business Connector 4.6/4.7 deleteSingle fullName Variable Arbitrary File Deletion

2006-02-15T00:00:00
ID EDB-ID:27234
Type exploitdb
Reporter Leandro Meiners
Modified 2006-02-15T00:00:00

Description

SAP Business Connector 4.6/4.7 deleteSingle fullName Variable Arbitrary File Deletion. CVE-2006-0731. Remote exploit for linux platform

                                        
                                            source: http://www.securityfocus.com/bid/16668/info
 
SAP Business Connector is prone to a file-access/deletion vulnerability. This issue arises due to an access-validation error.
 
A successful attack will result in the disclosure of sensitive or privileged information. An attacker may also delete arbitrary files. This often occurs with superuser privileges, since the package is often run with elevated privileges to gain access to TCP ports lower than 1024.

http://www.example.com/sapbc/invoke/sap.monitor.rfcTrace/deleteSingle?fullName=<path_to_file>