Remote File Access Vulnerability in SAP Web Application Server
CVE-2006-5784

Currently unrated

Key Information:

Vendor

SAP

Vendor
CVE Published:
7 November 2006

What is CVE-2006-5784?

An unspecified vulnerability exists in the enserver.exe component of SAP Web Application Server versions 6.40 prior to patch 136 and 7.00 prior to patch 66. This vulnerability allows remote attackers to potentially read arbitrary files through specially crafted data sent to a specific TCP port ('3200+SYSNR'), specifically demonstrated on port 3201. Additionally, local users may exploit this vulnerability to access a named pipe as the SAPServiceJ2E user, raising concerns about the security of sensitive data and server integrity.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.