Remote File Access Vulnerability in SAP Web Application Server
CVE-2006-5784

Currently unrated

Key Information:

Vendor

SAP
Status
SAP Web Application Server
Vendor
CVE Published:
7 November 2006

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2006-5784?

An unspecified vulnerability exists in the enserver.exe component of SAP Web Application Server versions 6.40 prior to patch 136 and 7.00 prior to patch 66. This vulnerability allows remote attackers to potentially read arbitrary files through specially crafted data sent to a specific TCP port ('3200+SYSNR'), specifically demonstrated on port 3201. Additionally, local users may exploit this vulnerability to access a named pipe as the SAPServiceJ2E user, raising concerns about the security of sensitive data and server integrity.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2006-5784 - Proof of Concept

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29982
vdb-entryx_refsource_XF
http://securityreason.com/securityalert/1828
third-party-advisoryx_refsource_SREASON
http://www.vupen.com/english/advisories/2006/4318
vdb-entryx_refsource_VUPEN

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.