113 matches found
Sybase ASA Ping
The remote Sybase SQL Anywhere / Adaptive Server Anywhere database is configured to listen for client connection broadcasts, which allows an attacker to see the name and port that the Sybase SQL Anywhere / Adaptive Server Anywhere server is running on. SPDX-FileCopyrightText: 2008 David Lodge Som...
SQL Anywhere Broadcast Repeater Detection
The remote service is a SQL Anywhere Broadcast Repeater, which allows SQL Anywhere clients to find SQL Anywhere database servers running on other subnets and through firewalls. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31717; scriptversion"1.8";...
MobiLink Server < 10.0.1 build 3649 mlsrv10.exe Multiple Remote Overflows
The version of the SQL Anywhere MobiLink Server installed on the remote host reportedly is affected by a heap-based buffer overflow when handling strings such as the username, version, and remote ID longer than 128 bytes. An unauthenticated attacker may be able to leverage this issue to execute...
CVE-2008-0912
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long 1 username, 2...
Heap overflow
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long 1 username, 2...
CVE-2008-0912
CVE-2008-0912 is a vulnerability in Sybase MobiLink (mlsrv10.exe) affecting 10.0.1.3629 and earlier, used by SQL Anywhere Developer Edition 10.0.1.3415 and possibly other products. The issue: multiple heap-based buffer overflows triggered by processing overly long strings (username, version, remo...
Sybase SQL Anywhere Database Version Detection
Binary data 4396.prm...
Sybase ASA Default Database Password
The remote Sybase SQL Anywhere / Adaptive Server Anywhere server uses default credentials 'DBA' / 'SQL'. An attacker may use this flaw to execute commands against the remote host, as well as read your database content. C David Lodge 13/08/2007 This script is based on sybaseblankpassword.nasl whic...
Sybase SQL Anywhere Server Detection
Binary data sqlanywheredetect.nbin...
Sybase SQL-Anywhere Database Server Detection
Binary data 5148.prm...
Sybase SQL-Anywhere Database Client Detection
Binary data 5149.prm...
Sybase SQL-Anywhere Database Server Default Credentials
Binary data 5150.prm...
Multiple Vulnerabilities Sybase Anywhere 9
NGSSoftware Insight Security Research Advisory Name: Multiple Vulnerabilities in Adaptive Server Anywhere Network Server Version 9.0.0 Systems Affected: SQL Anywhere 9 Windows 2000 / XP Have not been verified on UNIX Severity: Critical Vendor URL: http://www.sybase.com Authors: Sherief Hammad...