CVE-2011-0497

2011-01-2018:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

78.0%

JSON

Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "…/" (dot dot forward-slash backslash) sequences in a crafted request.

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=889

osvdb.org/70427

secunia.com/advisories/42904

www.securityfocus.com/bid/45809

www.sybase.com/detail?id=1091057

www.vupen.com/english/advisories/2011/0125

exchange.xforce.ibmcloud.com/vulnerabilities/64695