CVE - CVE-2006-5784

CVE-ID
CVE-2006-5784	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:20877 URL:http://www.securityfocus.com/bid/20877 BUGTRAQ:20061102 Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00 URL:http://www.securityfocus.com/archive/1/450394/100/0/threaded BUGTRAQ:20070208 Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technicaldetails) URL:http://www.securityfocus.com/archive/1/459499/100/0/threaded EXPLOIT-DB:3291 URL:https://www.exploit-db.com/exploits/3291 SECTRACK:1017628 URL:http://www.securitytracker.com/id?1017628 SECUNIA:22677 URL:http://secunia.com/advisories/22677 SREASON:1828 URL:http://securityreason.com/securityalert/1828 VUPEN:ADV-2006-4318 URL:~~http://www.vupen.com/english/advisories/2006/4318~~ (Obsolete source) XF:sap-pipe-privilege-escalation(29982) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/29982
Assigning CNA
MITRE Corporation
Date Record Created
20061107	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061107)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)