CVE

Id
21888  
CVE No.
CVE-2006-5784  
Status
Candidate  
Description
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.  
Phase
Assigned (20061107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
210170 21888 CVE-2006-5784 BUGTRAQ:20061102 Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00  View
210171 21888 CVE-2006-5784 URL:http://www.securityfocus.com/archive/1/archive/1/450394/100/0/threaded  View
210172 21888 CVE-2006-5784 BUGTRAQ:20070208 Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technicaldetails)  View
210173 21888 CVE-2006-5784 URL:http://www.securityfocus.com/archive/1/archive/1/459499/100/0/threaded  View
210174 21888 CVE-2006-5784 MILW0RM:3291  View
210175 21888 CVE-2006-5784 URL:http://milw0rm.com/exploits/3291  View
210176 21888 CVE-2006-5784 BID:20877  View
210177 21888 CVE-2006-5784 URL:http://www.securityfocus.com/bid/20877  View
210178 21888 CVE-2006-5784 VUPEN:ADV-2006-4318  View
210179 21888 CVE-2006-5784 URL:http://www.vupen.com/english/advisories/2006/4318  View
210180 21888 CVE-2006-5784 SECTRACK:1017628  View
210181 21888 CVE-2006-5784 URL:http://www.securitytracker.com/id?1017628  View
210182 21888 CVE-2006-5784 SECUNIA:22677  View
210183 21888 CVE-2006-5784 URL:http://secunia.com/advisories/22677  View
210184 21888 CVE-2006-5784 SREASON:1828  View
210185 21888 CVE-2006-5784 URL:http://securityreason.com/securityalert/1828  View
210186 21888 CVE-2006-5784 XF:sap-pipe-privilege-escalation(29982)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59246 JVNDB-2006-001512 e107 の class2.php におけるディレクトリトラバーサルの脆弱性 e107 の class2.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-5786 21888 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001512.html  View