EUVD-2011-4978

Malware in sbrugna...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

Authentication flaw

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078: Undefined Security Weakness

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

Sybase M-Business Anywhere两个权限提升漏洞

Sybase 的M-Business Anywhere 可以提供一个移动内容和应用程序平台，将基于Web的移动内容和应用程序传送至移动设备。 Sybase M-Business Anywhere在实现上存在两个未明细节的漏洞，可被恶意用户利用获取提升的权限。 Sybase Sybase M-Business Anywhere 7.x Sybase Sybase M-Business Anywhere 6.x 厂商补丁： Sybase ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sybase.com/...

Sybase M-Business Anywhere agSoap.exe Buffer Overflow

A heap buffer overflow has been reported in Sybase M-Business Anywhere. M-Business Anywhere is a mobile applications development, deployment and management platform. The vulnerability is due to a boundary error in the server while handling specially crafted SOAP requests. A remote attacker could...

Sybase M-Business Anywhere (AvantGo) gsoap Module password Tag Handling Overflow

The Sybase M-Business Anywhere AvantGo software installed on the remote host includes a SOAP server that fails to validate an XML end tag in a SOAP request, resulting in a buffer overflow. An unauthenticated, remote attacker can exploit this to execute arbitrary code. This plugin checks the heap...

Sybase M-Business Anywhere (AvantGo) SOAP Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...

Sybase M-Business Anywhere (AvantGo) Sync Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo Sync Server, which handles synchronization requests from a mobile device and determines whether to obtain requested pages from the source web server or from a shared cache on the Sync Server itself. C Tenable Network Security, In...

Sybase M-Business Anywhere agd.exe username Parameter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase M-Business Anywhere. Authentication is not required to exploit this vulnerability. The specific flaw exists within agsync.dll, which listens for SOAP and sync HTTP requests on ports 80 and 4...

Sybase M-Business Anywhere agSoap.exe password Tag Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase M-Business Anywhere. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gsoap.exe module exposed by the webserver that listens by default on TC...

Sybase M-Business Anywhere Server agd.exe encodeUsername Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase MBusiness Anywhere. Authentication is not required to exploit this vulnerability. The flaw exists within the agd.exe component which listens by default on TCP port 80 and 443. When calling...