Remote File Access Vulnerability in SAP Web Application Server
CVE-2006-5784

Currently unrated

Key Information:

Vendor

SAP
Status
SAP Web Application Server
Vendor
CVE Published:
7 November 2006

What is CVE-2006-5784?

An unspecified vulnerability exists in the enserver.exe component of SAP Web Application Server versions 6.40 prior to patch 136 and 7.00 prior to patch 66. This vulnerability allows remote attackers to potentially read arbitrary files through specially crafted data sent to a specific TCP port ('3200+SYSNR'), specifically demonstrated on port 3201. Additionally, local users may exploit this vulnerability to access a named pipe as the SAPServiceJ2E user, raising concerns about the security of sensitive data and server integrity.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29982
vdb-entryx_refsource_XF
http://securityreason.com/securityalert/1828
third-party-advisoryx_refsource_SREASON
http://www.vupen.com/english/advisories/2006/4318
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.