510 matches found
CVE-2002-1861
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...
CVE-2002-1861: Undefined Security Weakness
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...
CVE-2005-0942
The XP Server process xpserver in Sybase Adaptive Server Enterprise ASE XP Server 12.x before 12.5.3 ESD1 allows attackers to cause a denial of service process crash via malformed data sent to the XP Server TCP port...
Sybase ASE database multiple vulnerabilities
Multiple buffer overflows and DoS conditions...
Sybase ASE Multiple Security Issues (#NISR05042005)
NGSSoftware Insight Security Research Advisory Name: Sybase ASE Multiple Security Issues Systems Affected: Sybase ASE versions prior to 12.5.3 ESD1 Severity: High Vendor URL: http://www.sybase.com/ Researchers: Mark Litchfield [email protected] Sherief Hammad [email protected] Chris Anle...
CVE-2005-0942
Affected software: Sybase Adaptive Server Enterprise (ASE) XP Server 12.x. Vulnerable component: XP Server process (xp_server). Root cause: Denial of service caused by processing malformed data sent to the XP Server TCP port, leading to a process crash. Impact: Availability loss for the XP Server...
CVE-2005-0942
The XP Server process xpserver in Sybase Adaptive Server Enterprise ASE XP Server 12.x before 12.5.3 ESD1 allows attackers to cause a denial of service process crash via malformed data sent to the XP Server TCP port...
CVE-2005-0942: Undefined Security Weakness
The XP Server process xpserver in Sybase Adaptive Server Enterprise ASE XP Server 12.x before 12.5.3 ESD1 allows attackers to cause a denial of service process crash via malformed data sent to the XP Server TCP port...
Sybase SQL sa Account Blank Password
The remote Sybase SQL server has the default 'sa' account enabled without any password. An attacker may use this flaw to execute commands against the remote host as well as read database content. C Tenable Network Security, Inc. This script is based on mssqlblankpassword.nasl which is C H D Moore...
Sybase TCP/IP Listener Service Detection
The remote host is running a Sybase SQL server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17161; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/24"; scriptnameenglish:"Sybase TCP/IP Listener Service Detection";...
Sybase Adaptive Server Enterprise < 12.5.4.0 Multiple Vulnerabilities
The remote host is running Sybase Adaptive Server Enterprise, a SQL server with network capabilities. The remote version of this software is earlier than 12.5.4.0. Such versions are affected by several unspecified security flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...
CVE-2005-0441
Sybase ASE 12.x before 12.5.3 ESD#1 contains multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code via (1) attrib_valid, (2) covert, (3) declare, (4) crafted query plan, or (5) crafted install java statement. Affected versions also include ASE
CVE-2005-0441: Undefined Security Weakness
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...
Sybase ASE 12.5.2 vulnerabilities
Sherief Hammad of NGSSoftware has discovered three high risk security vulnerabilities in Sybase Adaptive Server Enterprise 12.5.2. Sybase ASE versions 12.5.2 and older are vulnerable to these issues. These vulnerabilities have now been fixed by Sybase in the Sybase ASE 12.5.3 interim release whic...
CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...
ON Command CCM default pasword
Few accounts with default passwords for Sybase database...
Sybase SQL-Anywhere Database Client Detection
Binary data 5149.prm...