CVE-2013-6864: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to affect confidentiality, integrity, and availability via unspecified vectors...

CVE-2013-6859: Improper Authentication

SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-6868: Exposure of Sensitive Information to an Unauthorized Actor

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6861: Undefined Security Weakness

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6867: Undefined Security Weakness

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2013-6862: Undefined Security Weakness

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2013-6865: Improper Control of Generation of Code

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka CR732989...

SAP Sybase Adaptive Server Enterprise Detection

Binary data sybaseaseinstalled.nbin...

SAP Sybase Adaptive Server Enterprise Remote Code Execution (SAP Note 1893558)

A buffer overflow vulnerability exists in SAP Sybase ASE. This enables an attacker to inject code into the working memory that is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate. C Tenable Network Security, In...

SAP Sybase Adaptive Server Enterprise Remote Code Execution (SAP Note 1893560)

SAP Sybase Adaptive Server Enterprise ASE contains an unspecified flaw that may allow an authenticated, remote attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2013-6245

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2013-6245

SAP Sybase Adaptive Server Enterprise (ASE) is affected by CVE-2013-6245. The vulnerability affects ASE versions prior to 15.0.3 ESD#4.3, 15.5 prior to 15.5 ESD#5.3, and 15.7 prior to 15.7 SP50 or SP100, where remote authenticated users may execute arbitrary code via unspecified vectors. The Ness...

CVE-2013-6245: Undefined Security Weakness

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors...

Xxe

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise ASE 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity XX...

CVE-2013-6025

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise ASE 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity XX...

CVE-2013-6025: Improper Control of Generation of Code

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise ASE 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity XX...

Sybase Fixes Nine ASE Flaws

Enterprise software and services company Sybase has again patched holes in its Adaptive Server Enterprise ASE product, fixing a handful of database vulnerabilities that could have allowed a hacker to execute code and bypass security parameters on the company’s main database server product. As...

SAP's Sybase RDMS Patches Fail to Repair 10 Critical Vulnerabilities

Patches released this week by database and mobile management vendor Sybase did not completely repair serious privilege escalation and remote code execution vulnerabilities in versions 15.0.3 and later of its Adaptive Server Enterprise ASE product. Researchers at Application Security Inc., which...

Sybase Adaptive Server Backup / Monitor Server Translation security vulnerabilities

Different code execution vulnerabilities...

ZDI-11-245: Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability

ZDI-11-245: Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-245 July 29, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Sybase -- Affected Products: Sybase Adaptive Server ...