SAP NetWeaver bapi smb relay Arbitrary File leakage Vulnerability

Release date:
Updated on: 2013-03-17

Affected Systems:
Sap net Weaver 7.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58487
 
SAP NetWeaver is the integrated technology platform of SAP and the technical foundation of all SAP applications since SAP Business Suite.
 
When processing SMB in SAP NetWeaver 7.30 and other versions, BAPI function errors exist. SMB relay attacks can cause leakage of arbitrary files on the SAP server file system.
 
<* Source: Nikolay Mescherin

Link: http://secunia.com/advisories/52598/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
SAP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.sap.com/platform/netweaver/index.epx