CVE-2006-5784
Last modified
CVE-2006-5784 is a vulnerability of currently unknown severity. Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.. EPSS estimates a 2.92% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Sap Web Application Server | 6.40 |
| Sap | Sap Web Application Server | 7.00 |
References
- http://secunia.com/advisories/22677Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4318Vendor Advisory
- http://secunia.com/advisories/22677Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4318Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-5784?
How severe is CVE-2006-5784?
How do I fix CVE-2006-5784?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-5778ftpd in linux-ftpd 0.17, and possibly other versions, perfor…
- CVE-2006-5779OpenLDAP before 2.3.29 allows remote attackers to cause a de…7.5
- CVE-2006-5780Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Se…
- CVE-2006-5781Stack-based buffer overflow in the handshake function in iod…
- CVE-2006-5782radexecd.exe in HP OpenView Client Configuraton Manager (CCM…
- CVE-2006-5783Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to …
- CVE-2006-5785Unspecified vulnerability in SAP Web Application Server 6.40…
- CVE-2006-5786Directory traversal vulnerability in class2.php in e107 0.7.…
- CVE-2006-5787admin/index.php in IPrimal Forums as of 20061105 allows remo…
- CVE-2006-5788PHP remote file inclusion vulnerability in (1) index.php and…
- CVE-2006-5789War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenti…
- CVE-2006-5790Multiple format string vulnerabilities in elogd.c in ELOG 2.…
Are you affected by CVE-2006-5784?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
