NVD

Id
59463  
Name
CVE-2006-0732  
Description
Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to (1) sapbc/SAP/chopSAPLog.dsp or (2) invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended. NOTE: SAP Business Connector is an OEM version of webMethods Integration Server. webMethods states that this issue can only occur when the product is installed as root/admin, and if the attacker has access to a general purpose port; however, both are discouraged in the documentation. In addition, the attacker must already have acquired administrative privileges through other means.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-16  
Modified Date
2011-03-07  
Seq
2006-0732  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
305727 59463 CVE-2006-0732 1015639  View
305728 59463 CVE-2006-0732 1016090  View
305729 59463 CVE-2006-0732 1016122  View
305730 59463 CVE-2006-0732 http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf  View
305731 59463 CVE-2006-0732 http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf  View
305732 59463 CVE-2006-0732 20060215 CYBSEC - Security Pre-Advisory: Arbitrary File Read/Delete in SAPBC  View
305733 59463 CVE-2006-0732 20060515 CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC(Business Connector)  View
305734 59463 CVE-2006-0732 16668  View
305735 59463 CVE-2006-0732 ADV-2006-0611  View

Related JVN