bugtraq - Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 07 Nov 2006 00:43:33 +0100
From: Nicob <nicob@...ob.net>
To: bugtraq@...urityfocus.com
Subject: Re: Multiple vulnerabilities in SAP Web Application Server 6.40
	and7.00

Le vendredi 03 novembre 2006, harrisonholland@...il.com a écrit :

>  Unfortunately SAP makes it difficult to find what you are looking for
> on the service marketplace sometimes, and I am not sure which avenue
> to look for the patch 66 for Web AS 7.00.

>>From note #994630 : "ABAP customers can find the patches of the
standalone enqueue server on SAP Service Marketplace in the same
directory as the SAP kernel patches (disp+work, dw). J2EE customers will
find the standalone enqueue server for their engine in the same
directory as the SAPEXE package for their engine. The package in which
the standalone enqueue server is delivered has the name enserver.SAR."

I checked the SAP Support Portal, and I was effectively unable to find
patch 66 for version 7.00 (patch 136 for 6.40 is OK). I just send them a
mail about it.


Nicob