PT-2015-5202

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Sybase ASE affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The estimated number of potentially affected devices and details about...

CVE-2014-6283

SAP Adaptive Server Enterprise (ASE) versions affected: 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 before ESD#4.4. The issue arises from insufficient access restrictions, allowing remote authenticated database users to (1) overwrite the master encryption key or (2) trigger a buffe...

CVE-2014-6283: Undefined Security Weakness

SAP Adaptive Server Enterprise ASE 15.7 before SP122 or SP63, 15.5 before ESD5.4, and 15.0.3 before ESD4.4 does not properly restrict access, which allows remote authenticated database users to 1 overwrite the master encryption key or 2 trigger a buffer overflow via a crafted RPC message to the...

PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow

No description provided by source. / Exploit Title: Plib + flightgear 3dconvert exploit Date: 08/10/2012 Author: Andres Gomez Software Links: Plib: http://plib.sourceforge.net/ flightgear: http://www.flightgear.org/ 3dconvert: ftp://ftp.ihg.uni-duisburg.de/FlightGear/Win32/old/3dconvert-win32.zip...

CVE-2013-6864

Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to affect confidentiality, integrity, and availability via unspecified vectors...

CVE-2013-6865

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka CR732989...

CVE-2013-6861

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6862

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2013-6863

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-6859

SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authenticated users to gain privileges via unspecified vectors...

Directory traversal

Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to affect confidentiality, integrity, and availability via unspecified vectors...

Authorization

SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-6861

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6860

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-6860

Technical details about CVE-2013-6860 are not publicly available in the provided documents. Monitor for updates; current information is limited to a generic description of affected SAP ASE versions and unspecified vectors.

CVE-2013-6865

CVE-2013-6865 affects SAP Sybase Adaptive Server Enterprise (ASE) versions 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The description: remote authenticated users can execute arbitrary code via unspecified vectors (CR732989). The connected Red Hat, ...

CVE-2013-6864

CVE-2013-6864 affects SAP Sybase ASE: vulnerable versions include 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The issue is a directory traversal in ASE that remote authenticated users can leverage to impact confidentiality, integrity, and availabili...

CVE-2013-6866

SAP Sybase ASE is affected prior to 15.0.3 ESD#4.3, prior to 15.5 ESD#5.3, and prior to 15.7 SP50/SP100, where remote authenticated users can execute arbitrary code via unspecified vectors (CR736689). The connected sources confirm these versions and the broad impact described, but do not provide ...

CVE-2013-6868

CVE-2013-6868 affects SAP Sybase ASE: versions 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The vulnerability is a local information disclosure, arising from an unspecified vector, allowing local users to obtain sensitive data. The initial descriptio...

CVE-2013-6859

The CVE-2013-6859 issue affects SAP Sybase Adaptive Server Enterprise (ASE) versions described as vulnerable before: 15.0.3 ESD#4.3 , 15.5 before 15.5 ESD#5.3 , and 15.7 before 15.7 SP50 or 15.7 SP100 . The root cause is improper authorization, enabling remote authenticated users to gain privileg...