RZL_READ_DIR_LOCAL (directory listing and SMB relay)

This module exploits the SAP NetWeaver RZL_READ_DIR_LOCAL Missing Authorisation Check And SMB Relay Vulnerability. RZL_READ_DIR_LOCAL returns the file names in a given directory. It returns only the first 32 characters of a filename (truncated).

SAP Note 1595074 / DSECRG-12-026.

http://erpscan.com/advisories/dsecrg-12-026-sap-netweaver-rzl_read_dir_local-missing-authorization-check-and-smb-relay-vulnerability