CVE-2006-6011

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-21 · updated 2026-06-16

Description

Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a certain UDP packet to port 64999, aka "two bytes UDP crash," a different vulnerability than CVE-2006-5785.

Affected products

Sap Web Application Server: 6.40

References

http://securityreason.com/securityalert/1889
http://www.securityfocus.com/archive/1/451378/100/0/threaded
http://securityreason.com/securityalert/1889
http://www.securityfocus.com/archive/1/451378/100/0/threaded

Get alerted when CVE-2006-6011 or the next vulnerability affects your stack