CVE-2013-6860

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-6859

The CVE-2013-6859 issue affects SAP Sybase Adaptive Server Enterprise (ASE) versions described as vulnerable before: 15.0.3 ESD#4.3 , 15.5 before 15.5 ESD#5.3 , and 15.7 before 15.7 SP50 or 15.7 SP100 . The root cause is improper authorization, enabling remote authenticated users to gain privileg...

CVE-2013-6868

CVE-2013-6868 affects SAP Sybase ASE: versions 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The vulnerability is a local information disclosure, arising from an unspecified vector, allowing local users to obtain sensitive data. The initial descriptio...

CVE-2013-6862

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2013-6864

CVE-2013-6864 affects SAP Sybase ASE: vulnerable versions include 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The issue is a directory traversal in ASE that remote authenticated users can leverage to impact confidentiality, integrity, and availabili...

CVE-2013-6866

SAP Sybase ASE is affected prior to 15.0.3 ESD#4.3, prior to 15.5 ESD#5.3, and prior to 15.7 SP50/SP100, where remote authenticated users can execute arbitrary code via unspecified vectors (CR736689). The connected sources confirm these versions and the broad impact described, but do not provide ...

CVE-2013-6863

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-6863

SAP Sybase ASE 15.0.3 (pre-ESD 4.3), 15.5 (pre-ESD 5.3), and 15.7 (pre-SP50/SP100) are affected by CVE-2013-6863. The issue allows remote authenticated users to gain privileges via unspecified vectors. The available sources (NVD, Red Hat advisory) provide the affected version ranges and the high-...

CVE-2013-6865

CVE-2013-6865 affects SAP Sybase Adaptive Server Enterprise (ASE) versions 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The description: remote authenticated users can execute arbitrary code via unspecified vectors (CR732989). The connected Red Hat, ...

CVE-2013-6864

Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to affect confidentiality, integrity, and availability via unspecified vectors...

CVE-2013-6861

Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6865

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka CR732989...

CVE-2013-6868

SAP Sybase Adaptive Server Enterprise ASE 15.0.3 before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-6867

The vulnerability (CVE-2013-6867) affects SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100. Root cause not disclosed in provided sources; exploitation targets remote systems to cause a denial of service via unspecified vectors. No exploits or in‑the‑wild details are...

SAP Sybase Adaptive Server Enterprise Detection

Binary data sybaseaseinstalled.nbin...

SAP Sybase Adaptive Server Enterprise Directory Traversal (SAP Note 1893556)

SAP Sybase ASE on Microsoft Windows contains a vulnerability through which an attacker can potentially write arbitrary files to the remote server, possibly corrupting data or altering system behavior. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70976;...

SAP Sybase Adaptive Server Enterprise Information Disclosure (SAP Note 1887341)

Information in protected files on machines running SAP Sybase ASE may be disclosed to an attacker. This information may be used by the attacker to further target specialized attacks on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70973;...

SAP Sybase Adaptive Server Enterprise SQL Injection (SAP Note 1893440)

SAP Sybase Adaptive Server Enterprise ASE contains a flaw that may allow an attacker to carry out a SQL injection attack. The issue is due to the program not properly sanitizing user-supplied input before using it in SQL queries. This may allow an attacker to inject or manipulate SQL queries in t...

SAP Sybase Adaptive Server Enterprise Authorization Bypass (SAP Note 1849356)

An authenticated, remote user can access functions of SAP Sybase ASE to which access should be restricted. This may result in an escalation of privileges. SAP Sybase ASE does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This...

SAP Sybase Adaptive Server Enterprise Remote Code Execution (SAP Note 1893560)

SAP Sybase Adaptive Server Enterprise ASE contains an unspecified flaw that may allow an authenticated, remote attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if...