ID CVE-2006-6010
Summary SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than CVE-2003-0747.
References
Vulnerable Configurations
  • cpe:2.3:a:sap:sap_web_application_server:*:*:*:*:*:*:*:*
    cpe:2.3:a:sap:sap_web_application_server:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 17-10-2018 - 21:46)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bugtraq 20061112 Old SAP exploits
sreason 1889
xf netweaver-rfcsysteminfo-info-disclosure(39997)
Last major update 17-10-2018 - 21:46
Published 21-11-2006 - 23:07
Last modified 17-10-2018 - 21:46
Back to Top