CVE-2013-6863: Undefined Security Weakness

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-6864: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to affect confidentiality, integrity, and availability via unspecified vectors...

CVE-2013-6859: Improper Authentication

SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-6867: Undefined Security Weakness

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2013-6861: Undefined Security Weakness

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6862: Undefined Security Weakness

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2013-6868: Exposure of Sensitive Information to an Unauthorized Actor

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6865: Improper Control of Generation of Code

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka CR732989...

SAP Sybase Adaptive Server Enterprise Detection

Binary data sybaseaseinstalled.nbin...

SAP Sybase Adaptive Server Enterprise Information Disclosure (SAP Note 1887341)

Information in protected files on machines running SAP Sybase ASE may be disclosed to an attacker. This information may be used by the attacker to further target specialized attacks on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70973;...

SAP Sybase Adaptive Server Enterprise Authorization Bypass (SAP Note 1849356)

An authenticated, remote user can access functions of SAP Sybase ASE to which access should be restricted. This may result in an escalation of privileges. SAP Sybase ASE does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This...

SAP Sybase Adaptive Server Enterprise Directory Traversal (SAP Note 1893556)

SAP Sybase ASE on Microsoft Windows contains a vulnerability through which an attacker can potentially write arbitrary files to the remote server, possibly corrupting data or altering system behavior. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70976;...

SAP Sybase Adaptive Server Enterprise SQL Injection (SAP Note 1893440)

SAP Sybase Adaptive Server Enterprise ASE contains a flaw that may allow an attacker to carry out a SQL injection attack. The issue is due to the program not properly sanitizing user-supplied input before using it in SQL queries. This may allow an attacker to inject or manipulate SQL queries in t...

SAP Sybase Adaptive Server Enterprise Remote Code Execution (SAP Note 1893560)

SAP Sybase Adaptive Server Enterprise ASE contains an unspecified flaw that may allow an authenticated, remote attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if...

SAP Sybase Adaptive Server Enterprise Remote Code Execution (SAP Note 1893558)

A buffer overflow vulnerability exists in SAP Sybase ASE. This enables an attacker to inject code into the working memory that is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate. C Tenable Network Security, In...

SAP Sybase Adaptive Server Enterprise Information Disclosure (SAP Note 1893562)

Information about SAP Sybase ASE may be discovered in database dump files. This information may be used by an attacker to create targeted attacks against SAP Sybase ASE. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70980; scriptversion"1.9";...

SAP Sybase Adaptive Server Enterprise DoS (SAP Note 1893561)

An attacker can launch a specially crafted request causing the SAP Sybase ASE process on Microsoft Windows to be terminated. This causes the SAP Sybase ASE to become unavailable until the process is rebooted manually. This condition can be intentionally provoked by an attacker to cause a denial o...

SAP Sybase Adaptive Server Enterprise Information Disclosure (SAP Note 1809246)

An unauthenticated, remote attacker can discover information relating to the installed version of SAP Sybase ASE. This information could be used to allow the attacker to specialize further attacks against SAP Sybase ASE. C Tenable Network Security, Inc. include"compat.inc"; if description...

SAP Sybase Adaptive Server Enterprise DoS (SAP Note 1887342)

An unauthenticated, remote attacker can trigger a condition in which SAP Sybase ASE enters an endless loop, causing it to consume all of the available processing time. This causes the entire machine to become unresponsive until the process is terminated manually. An attacker can use this flaw to...

CVE-2013-6245

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors...