CVE-2011-2475

2011-06-0921:55:01

CWE-134

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.018

Percentile

88.5%

JSON

Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.

Affected configurations

Nvd

Node

sybaseonebridge_mobile_data_suiteMatch5.5

sybaseonebridge_mobile_data_suiteMatch5.6

VendorProductVersionCPE
sybaseonebridge_mobile_data_suite5.5cpe:2.3:a:sybase:onebridge_mobile_data_suite:5.5:*:*:*:*:*:*:*
sybaseonebridge_mobile_data_suite5.6cpe:2.3:a:sybase:onebridge_mobile_data_suite:5.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sybase	onebridge_mobile_data_suite	5.5	cpe:2.3:a:sybase:onebridge_mobile_data_suite:5.5:::::::*
sybase	onebridge_mobile_data_suite	5.6	cpe:2.3:a:sybase:onebridge_mobile_data_suite:5.6:::::::*