PT-2006-6464 · Sap · Sap Web Application Server

Nicob · Publicado 2006-11-07 · Atualizado 2018-10-17 · CVE-2006-5785

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: SAP Web Application Server versions 6.40 before patch 136 SAP Web Application Server versions 7.00 before patch 66

Description: The issue allows remote attackers to cause a denial of service, resulting in an enserver.exe crash, by sending a specific sequence, 0x72F2, on UDP port 64999.

Recommendations: For SAP Web Application Server version 6.40, apply patch 136 to resolve the issue. For SAP Web Application Server version 7.00, apply patch 66 to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-5785

Produtos afetados

Sap Web Application Server

Referências · 9

• http://securitytracker.com/id?1017628 · Nota
• http://securityreason.com/securityalert/1828 · Nota
• http://vupen.com/english/advisories/2006/4318 · Aviso do Fabricante
• http://securityfocus.com/bid/20873 · Nota
• http://securityfocus.com/archive/1/450394/100/0/threaded · Nota
• http://securityfocus.com/archive/1/459499/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5785 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29981 · Nota
• http://secunia.com/advisories/22677 · Aviso do Fabricante