CVE-2011-2474

Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path...

CVE-2011-2474

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/sybaseeaservertraversal.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:55+00:00|...

Sybase Multiple Products Directory Traversal (CVE-2011-2474)

A directory traversal vulnerability has been reported in multiple Sybase products...

CVE-2011-2474

A directory traversal vulnerability exists in the HTTP Server of Sybase EAServer 6.3.1 Developer Edition (and potentially other Sybase products). The root cause is the failure to sufficiently sanitize user-supplied input, allowing remote attackers to use a // ../ ../ sequence in a path to read ar...

Sybase Easerver 6.3 Directory Traversal

This module exploits a directory traversal vulnerability found in Sybase EAserver's Jetty webserver on port 8000. Code execution seems unlikely with EAserver's default configuration unless the web server allows WRITE permission. Module Options msf use auxiliary/scanner/http/sybase/easervertravers...