bugtraq - Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Tue, 07 Nov 2006 00:43:33 +0100
From: Nicob <nicob@...ob.net>
To: bugtraq@...urityfocus.com
Subject: Re: Multiple vulnerabilities in SAP Web Application Server 6.40
	and7.00

Le vendredi 03 novembre 2006, harrisonholland@...il.com a écrit :

>  Unfortunately SAP makes it difficult to find what you are looking for
> on the service marketplace sometimes, and I am not sure which avenue
> to look for the patch 66 for Web AS 7.00.

>>From note #994630 : "ABAP customers can find the patches of the
standalone enqueue server on SAP Service Marketplace in the same
directory as the SAP kernel patches (disp+work, dw). J2EE customers will
find the standalone enqueue server for their engine in the same
directory as the SAPEXE package for their engine. The package in which
the standalone enqueue server is delivered has the name enserver.SAR."

I checked the SAP Support Portal, and I was effectively unable to find
patch 66 for version 7.00 (patch 136 for 6.40 is OK). I just send them a
mail about it.


Nicob