CVE-2006-5785 - Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch

CVE-2006-5785

Summary

Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence on UDP port 64999.

References

Vulnerable Configurations

cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_web_application_server:7.00:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_web_application_server:7.00:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 17-10-2018 - 21:45)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	20873
bugtraq	20061102 Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00 20070208 Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technicaldetails)
sectrack	1017628
secunia	22677
sreason	1828
vupen	ADV-2006-4318
xf	sap-enserver-dos(29981)

Last major update

17-10-2018 - 21:45

Published

07-11-2006 - 23:07

Last modified

17-10-2018 - 21:45