41 matches found
CVE-2013-6245
Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors...
CVE-2013-6025
The XMLParse procedure in SAP Sybase Adaptive Server Enterprise ASE 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity XX...
ZDI-11-245: Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability
ZDI-11-245: Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-245 July 29, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Sybase -- Affected Products: Sybase Adaptive Server ...
Sybase Adaptive Server Backup and Monitor Server NULL Write Remote Code Execution Vulnerability
No description provided by source. -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Sybase -- Affected Products: Sybase Adaptive Server -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection...
Sybase Adaptive Server Backup and Monitor Server NULL Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handles certain data in the login...
Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handle certain data in the...
Sybase Adaptive Server Enterprise Backup Server Format String Vulnerability
This host is running Sybase Adaptive Server and is prone to format string vulnerability. OpenVAS Vulnerability Test $Id: gbsybaseadaptiveserverformatstringvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Sybase Adaptive Server Enterprise Backup Server Format String Vulnerability Authors: Sooraj KS...
bcksrvr format string in Sybase Adaptive Server 15.5
Luigi Auriemma Application: Sybase Adaptive Server http://www.sybase.com/products/databasemanagement/adaptiveserverenterprise Versions: = 15.5 Platforms: Solaris, Windows, Linux, AIX, HP Bug: format string in bcksrvr Exploitation: remote, versus server Date: 27 Jun 2011 found 28 Oct 2010 Author:...
bcksrvr format string in Sybase Adaptive Server 15.5
Luigi Auriemma Application: Sybase Adaptive Server http://www.sybase.com/products/databasemanagement/adaptiveserverenterprise Versions: = 15.5 Platforms: Solaris, Windows, Linux, AIX, HP Bug: format string in bcksrvr Exploitation: remote, versus server Date: 27 Jun 2011 found 28 Oct 2010 Author:...
CVE-2002-2250
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via 1 a long parameter to the xpfreedll extended stored procedure or 2 a long database name argument to the DBCC CHECKVERIFY function...
CVE-2005-0942
The XP Server process xpserver in Sybase Adaptive Server Enterprise ASE XP Server 12.x before 12.5.3 ESD1 allows attackers to cause a denial of service process crash via malformed data sent to the XP Server TCP port...
Sybase Adaptive Server Enterprise < 12.5.4.0 Multiple Vulnerabilities
The remote host is running Sybase Adaptive Server Enterprise, a SQL server with network capabilities. The remote version of this software is earlier than 12.5.4.0. Such versions are affected by several unspecified security flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...
CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...
Multiple Vulnerabilities Sybase Anywhere 9
NGSSoftware Insight Security Research Advisory Name: Multiple Vulnerabilities in Adaptive Server Anywhere Network Server Version 9.0.0 Systems Affected: SQL Anywhere 9 Windows 2000 / XP Have not been verified on UNIX Severity: Critical Vendor URL: http://www.sybase.com Authors: Sherief Hammad...
CVE-2003-0327
Sybase Adaptive Server Enterprise ASE 12.5 allows remote attackers to cause a denial of service hang via a remote password array with an invalid length, which triggers a heap-based buffer overflow...
CVE-2002-2250
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via 1 a long parameter to the xpfreedll extended stored procedure or 2 a long database name argument to the DBCC CHECKVERIFY function...
ASI Sybase Security Alert: Buffer overflow in xp_freedll
Sybase Adaptive Server buffer overflow in xpfreedll extended stored procedure http://www.appsecinc.com/resources/alerts/sybase/02-0003.html To determine if you should apply this hot fix, download AppDetective for Sybase from http://www.sybasesecurity.net/products/appdetective/sybase/. Risk level:...
ASI Sybase Security Alert: Buffer overflow in DROP DATABASE
Sybase Adaptive Server buffer overflow in DROP DATABASE http://www.appsecinc.com/resources/alerts/sybase/02-0002.html To determine if you should apply this hot fix, download AppDetective for Sybase from http://www.sybasesecurity.net/products/appdetective/sybase/. Risk level: High Threat: Allows a...
CVE-2001-0599
Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to port 2638...