National Cyber Awareness System

Vulnerability Summary for CVE-2006-0732

Overview

Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to (1) sapbc/SAP/chopSAPLog.dsp or (2) invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended. NOTE: SAP Business Connector is an OEM version of webMethods Integration Server. webMethods states that this issue can only occur when the product is installed as root/admin, and if the attacker has access to a general purpose port; however, both are discouraged in the documentation. In addition, the attacker must already have acquired administrative privileges through other means.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

Solution

Apply patches (see SAP note 906401 and 908349).}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2006-0611

Hyperlink:http://www.vupen.com/english/advisories/2006/0611

External Source: BID

Name: 16668

Hyperlink:http://www.securityfocus.com/bid/16668

External Source: BUGTRAQ

Name: 20060215 CYBSEC - Security Pre-Advisory: Arbitrary File Read/Delete in SAPBC

Type: Advisory

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/425048/100/0/threaded

External Source: MISC

Name: http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf

Type: Advisory

Hyperlink:http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf

External Source: MISC

Name: http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf

Hyperlink:http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf

External Source: SECTRACK

Name: 1016122

Hyperlink:http://securitytracker.com/id?1016122

External Source: SECTRACK

Name: 1015639

Hyperlink:http://securitytracker.com/id?1015639

External Source: SECUNIA

Name: 18880

Type: Advisory

Hyperlink:http://secunia.com/advisories/18880

External Source: BUGTRAQ

Name: 20060515 CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC(Business Connector)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/434014/30/4980/threaded

External Source: SECTRACK

Name: 1016090

Hyperlink:http://securitytracker.com/id?1016090