Lucene search

K
cveMitreCVE-2011-0497
HistoryJan 20, 2011 - 7:00 p.m.

CVE-2011-0497

2011-01-2019:00:09
CWE-22
mitre
web.nvd.nist.gov
29
cve
2011
0497
directory traversal
sybase
easerver
appeon
replication server messaging edition
rsme
workspace
remote attack
arbitrary files
vulnerability

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.006

Percentile

78.0%

Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "…/" (dot dot forward-slash backslash) sequences in a crafted request.

Affected configurations

Nvd
Node
sybaseappeon_for_powerbuilderMatch2.5
OR
sybaseappeon_for_powerbuilderMatch2.6
OR
sybaseappeon_for_powerbuilderMatch2.7
OR
sybaseappeon_for_powerbuilderMatch2.8
OR
sybaseappeon_for_powerbuilderMatch6.0
OR
sybaseappeon_for_powerbuilderMatch6.1
OR
sybaseappeon_for_powerbuilderMatch6.2
OR
sybaseappeon_for_powerbuilderMatch6.5
OR
sybaseeaserverMatch5.0
OR
sybaseeaserverMatch5.0.1
OR
sybaseeaserverMatch5.1
OR
sybaseeaserverMatch5.2
OR
sybaseeaserverMatch5.2.1
OR
sybaseeaserverMatch5.3
OR
sybaseeaserverMatch5.5
OR
sybaseeaserverMatch6.0
OR
sybaseeaserverMatch6.0.2
OR
sybaseeaserverMatch6.1
OR
sybaseeaserverMatch6.2
OR
sybaseeaserverMatch6.3
OR
sybaseeaserverMatch6.3.1
OR
sybasereplication_servermessaging
OR
sybasereplication_serverMatch15.2messaging
OR
sybasesybase_workspace
OR
sybasesybase_workspaceMatch1.0
OR
sybasesybase_workspaceMatch1.5
OR
sybasesybase_workspaceMatch1.6
OR
sybasesybase_workspaceMatch1.7
OR
sybasesybase_workspaceMatch2.0
OR
sybasesybase_workspaceMatch2.0.1
OR
sybasesybase_workspaceMatch2.0.2
OR
sybasesybase_workspaceMatch2.1
OR
sybasesybase_workspaceMatch2.1.2
OR
sybasesybase_workspaceMatch2.5
VendorProductVersionCPE
sybaseappeon_for_powerbuilder2.5cpe:2.3:a:sybase:appeon_for_powerbuilder:2.5:*:*:*:*:*:*:*
sybaseappeon_for_powerbuilder2.6cpe:2.3:a:sybase:appeon_for_powerbuilder:2.6:*:*:*:*:*:*:*
sybaseappeon_for_powerbuilder2.7cpe:2.3:a:sybase:appeon_for_powerbuilder:2.7:*:*:*:*:*:*:*
sybaseappeon_for_powerbuilder2.8cpe:2.3:a:sybase:appeon_for_powerbuilder:2.8:*:*:*:*:*:*:*
sybaseappeon_for_powerbuilder6.0cpe:2.3:a:sybase:appeon_for_powerbuilder:6.0:*:*:*:*:*:*:*
sybaseappeon_for_powerbuilder6.1cpe:2.3:a:sybase:appeon_for_powerbuilder:6.1:*:*:*:*:*:*:*
sybaseappeon_for_powerbuilder6.2cpe:2.3:a:sybase:appeon_for_powerbuilder:6.2:*:*:*:*:*:*:*
sybaseappeon_for_powerbuilder6.5cpe:2.3:a:sybase:appeon_for_powerbuilder:6.5:*:*:*:*:*:*:*
sybaseeaserver5.0cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*
sybaseeaserver5.0.1cpe:2.3:a:sybase:easerver:5.0.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 341

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.006

Percentile

78.0%

Related for CVE-2011-0497