PT-2006-6464 · Sap · Sap Web Application Server

Nicob · Published 2006-11-07 · Updated 2018-10-17 · CVE-2006-5785

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: SAP Web Application Server versions 6.40 before patch 136 SAP Web Application Server versions 7.00 before patch 66

Description: The issue allows remote attackers to cause a denial of service, resulting in an enserver.exe crash, by sending a specific sequence, 0x72F2, on UDP port 64999.

Recommendations: For SAP Web Application Server version 6.40, apply patch 136 to resolve the issue. For SAP Web Application Server version 7.00, apply patch 66 to resolve the issue.

Fix

Related Identifiers

CVE-2006-5785

Affected Products

Sap Web Application Server

References · 9

• http://vupen.com/english/advisories/2006/4318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5785 · Security Note
• http://secunia.com/advisories/22677 · Vendor Advisory
• http://securitytracker.com/id?1017628 · Note
• http://securityreason.com/securityalert/1828 · Note
• http://securityfocus.com/bid/20873 · Note
• http://securityfocus.com/archive/1/450394/100/0/threaded · Note
• http://securityfocus.com/archive/1/459499/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29981 · Note