Lucene search

[email protected]CVE-2011-0497

HistoryJan 20, 2011 - 7:00 p.m.

CVE-2011-0497

2011-01-2019:00:09

CWE-22

[email protected]

web.nvd.nist.gov

cve

2011

0497

directory traversal

sybase

easerver

appeon

replication server messaging edition

rsme

workspace

remote attack

arbitrary files

vulnerability

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.006 Low

EPSS

Percentile

77.9%

JSON

Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "…/" (dot dot forward-slash backslash) sequences in a crafted request.

Affected configurations

NVD

Node

sybaseappeon_for_powerbuilderMatch2.5

sybaseappeon_for_powerbuilderMatch2.6

sybaseappeon_for_powerbuilderMatch2.7

sybaseappeon_for_powerbuilderMatch2.8

sybaseappeon_for_powerbuilderMatch6.0

sybaseappeon_for_powerbuilderMatch6.1

sybaseappeon_for_powerbuilderMatch6.2

sybaseappeon_for_powerbuilderMatch6.5

sybaseeaserverMatch5.0

sybaseeaserverMatch5.0.1

sybaseeaserverMatch5.1

sybaseeaserverMatch5.2

sybaseeaserverMatch5.2.1

sybaseeaserverMatch5.3

sybaseeaserverMatch5.5

sybaseeaserverMatch6.0

sybaseeaserverMatch6.0.2

sybaseeaserverMatch6.1

sybaseeaserverMatch6.2

sybaseeaserverMatch6.3

sybaseeaserverMatch6.3.1

sybasereplication_servermessaging

sybasereplication_serverMatch15.2messaging

sybasesybase_workspace

sybasesybase_workspaceMatch1.0

sybasesybase_workspaceMatch1.5

sybasesybase_workspaceMatch1.6

sybasesybase_workspaceMatch1.7

sybasesybase_workspaceMatch2.0

sybasesybase_workspaceMatch2.0.1

sybasesybase_workspaceMatch2.0.2

sybasesybase_workspaceMatch2.1

sybasesybase_workspaceMatch2.1.2

sybasesybase_workspaceMatch2.5

CPENameOperatorVersion
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq2.5
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq2.6
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq2.7
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq2.8
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq6.0
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq6.1
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq6.2
sybase:appeon_for_powerbuildersybase appeon for powerbuildereq6.5
sybase:easerversybase easervereq5.0
sybase:easerversybase easervereq5.0.1

CPE	Name	Operator	Version
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	2.5
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	2.6
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	2.7
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	2.8
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	6.0
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	6.1
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	6.2
sybase:appeon_for_powerbuilder	sybase appeon for powerbuilder	eq	6.5
sybase:easerver	sybase easerver	eq	5.0
sybase:easerver	sybase easerver	eq	5.0.1

Rows per page:

1-10 of 341

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=889

osvdb.org/70427

secunia.com/advisories/42904

www.securityfocus.com/bid/45809

www.sybase.com/detail?id=1091057

www.vupen.com/english/advisories/2011/0125

exchange.xforce.ibmcloud.com/vulnerabilities/64695

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.006 Low

EPSS

Percentile

77.9%

JSON

Related for CVE-2011-0497

prion1 nvd1 cvelist1