SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors.
https://service.sap.com/sap/support/notes/1674132
http://scn.sap.com/docs/DOC-8218
http://archives.neohapsis.com/archives/bugtraq/2013-04/0179.html