SAP Business Connector 4.6/4.7 chopSAPLog.dsp fullName Variable Arbitrary File Disclosure

2014-07-01T00:00:00
ID SSV:80850
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00

Description

No description provided by source.

                                        
                                            
                                                source: http://www.securityfocus.com/bid/16668/info

SAP Business Connector is prone to a file-access/deletion vulnerability. This issue arises due to an access-validation error.

A successful attack will result in the disclosure of sensitive or privileged information. An attacker may also delete arbitrary files. This often occurs with superuser privileges, since the package is often run with elevated privileges to gain access to TCP ports lower than 1024.

http://www.example.com/sapbc/SAP/chopSAPLog.dsp?fullName=/etc/passwd