Lucene search

K
cveMitreCVE-2011-2475
HistoryJun 09, 2011 - 9:55 p.m.

CVE-2011-2475

2011-06-0921:55:01
CWE-134
mitre
web.nvd.nist.gov
21
cve-2011-2475
format string vulnerability
ectrace.dll
imailgateway
internet mail gateway
onebridge server
dmz proxy
sybase onebridge mobile data suite

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.018

Percentile

88.5%

Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.

Affected configurations

Nvd
Node
sybaseonebridge_mobile_data_suiteMatch5.5
OR
sybaseonebridge_mobile_data_suiteMatch5.6
VendorProductVersionCPE
sybaseonebridge_mobile_data_suite5.5cpe:2.3:a:sybase:onebridge_mobile_data_suite:5.5:*:*:*:*:*:*:*
sybaseonebridge_mobile_data_suite5.6cpe:2.3:a:sybase:onebridge_mobile_data_suite:5.6:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.018

Percentile

88.5%

Related for CVE-2011-2475