CVE-2006-3786

Symantec pcAnywhere 12.5 is affected by CVE-2006-3786 due to weak integrity protection for .cif (CallerID) files, enabling local users to craft a custom .cif file and modify the superuser flag. The concrete impact is local privilege manipulation. Exploitation status is not provided in the connect...

CVE-2006-3784

CVE-2006-3784 affects Symantec pcAnywhere 12.5. The vulnerability arises from weak default permissions on the "/Symantec\pcAnywhere\Hosts" folder, enabling local users to gain privileges by placing a superuser .cif (CallerID) file in that folder and then logging in with a pcAnywhere client as a l...

CVE-2003-0327

Sybase ASE 12.5 is vulnerable to a remote DoS via an invalid-length remote password array , which triggers a heap-based overflow in the login handling path. The vulnerability requires a valid login to exploit and can cause the server to hang or become unresponsive (notably in Windows multi-thread...

R7-0016: Sybase ASE 12.5 Remote Password Array Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0016 Sybase ASE 12.5 Remote Password Array Denia...