Denial of Service Vulnerability in SAP Web Application Server by SAP
CVE-2006-5785

Currently unrated

Key Information:

Vendor

SAP
Status
SAP Web Application Server
Vendor
CVE Published:
7 November 2006

What is CVE-2006-5785?

An unspecified vulnerability in SAP Web Application Server versions 6.40 prior to patch 136 and 7.00 prior to patch 66 can be exploited by remote attackers. By sending a specific sequence (0x72F2) to UDP port 64999, attackers can induce a crash in the enserver.exe process, leading to a denial of service condition. This flaw underscores the importance of timely patching and robust network security measures.

References

http://securityreason.com/securityalert/1828
third-party-advisoryx_refsource_SREASON
http://www.vupen.com/english/advisories/2006/4318
vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/459499/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.