CVE-2006-5785: Medium severity SAP SAP Web Application Server vulnerability

Published Nov 7, 2006

Updated

Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence on UDP port 64999.

Affected Software

2 affected components

SAP SAP Web Application Server=7.00

SAP SAP Web Application Server=6.40

Remediation

Patch Available

http://secunia.com/advisories/22677

Event History

Nov 7, 2006

CVE Published

11:07 PM

Data Sourced

via NVD·11:07 PM

RemedyDescriptionSeverityAffected Software

Nov 8, 2006

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5785?

CVE-2006-5785 has a moderate severity level as it can cause denial of service due to the crashing of enserver.exe.

How do I fix CVE-2006-5785?

To fix CVE-2006-5785, apply patch 136 for SAP Web Application Server 6.40 or patch 66 for version 7.00.

What software versions are affected by CVE-2006-5785?

CVE-2006-5785 affects SAP Web Application Server versions 6.40 before patch 136 and 7.00 before patch 66.

Can CVE-2006-5785 be exploited remotely?

Yes, CVE-2006-5785 can be exploited remotely through a specific sequence sent to UDP port 64999.

What impact does CVE-2006-5785 have on systems?

The impact of CVE-2006-5785 includes a denial of service, leading to the unavailability of services provided by the SAP Web Application Server.