Remote File Access Vulnerability in SAP Web Application Server
CVE-2006-5784
Currently unrated
What is CVE-2006-5784?
An unspecified vulnerability exists in the enserver.exe component of SAP Web Application Server versions 6.40 prior to patch 136 and 7.00 prior to patch 66. This vulnerability allows remote attackers to potentially read arbitrary files through specially crafted data sent to a specific TCP port ('3200+SYSNR'), specifically demonstrated on port 3201. Additionally, local users may exploit this vulnerability to access a named pipe as the SAPServiceJ2E user, raising concerns about the security of sensitive data and server integrity.