536 matches found
Sybase Enterprise Application Server Management Console detection
The remote host is running the Sybase Enterprise Application Server JSP Administration Console. Sybase EAServer is the open application server from Sybase Inc an enterprise software and services company, exclusively focused on managing and mobilizing information. This VT was deprecated and the...
Sybase Enterprise Application Server Detection (HTTP)
HTTP based detection of Sybase Enterprise Application Server. SPDX-FileCopyrightText: 2008 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
MobiLink Server Detection
The remote service is a MobiLink server, a component of the Sybase SQL Anywhere package used for two-way data synchronization. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31718; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
Heap overflow
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long 1 username, 2...
CVE-2008-0912
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long 1 username, 2...
CVE-2008-0912
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long 1 username, 2...
CVE-2008-0912
CVE-2008-0912 is a vulnerability in Sybase MobiLink (mlsrv10.exe) affecting 10.0.1.3629 and earlier, used by SQL Anywhere Developer Edition 10.0.1.3415 and possibly other products. The issue: multiple heap-based buffer overflows triggered by processing overly long strings (username, version, remo...
Sybase MobiLink远程堆溢出漏洞
BUGTRAQ ID: 27914 Sybase mobilink是用于实现两个数据库之间数据同步的服务器。 MobiLink服务器在处理超长的请求数据时存在缓冲区溢出漏洞,远程攻击者可能利用此漏洞控制服务器。 MobiLink服务器在处理用户名、版本和远程ID等字符串时存在堆溢出漏洞。如果远程攻击者在预认证期间向服务器提交了超过128字节的字符串的话,就可能触发这个溢出,导致执行任意指令。 Sybase MobiLink = 10.0.1.3629 厂商补丁: Sybase ------ 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...
Sybase SQL Anywhere Database Version Detection
Binary data 4396.prm...
Sybase MobiLink buffer overflows
Multiple buffer overflows during authentication...
Heap overflow in Sybase MobiLink 10.0.1.3629
Luigi Auriemma Application: Sybase MobiLink http://www.sybase.com/developer/mobile/sqlanywhere/mobilink Versions: = 10.0.1.3629 Platforms: Windows and Linux/Unix Bug: heap overflow Exploitation: remote Date: 20 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
CVE-2008-0912: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via a long 1 username, 2...
Sybase MobiLink 10.0.1.3629 - Multiple Heap Buffer Overflow Vulnerabilities
Sybase MobiLink 10.0.1.3629 - Multiple Heap Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27914/info Sybase MobiLink is prone to multiple heap-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data....
Sybase MobiLink 10.0.1.3629 - Multiple Heap Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/27914/info Sybase MobiLink is prone to multiple heap-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. A successful exploit will allow remote attackers to execute arbitrary code ...
Fedora 7 : php-pear-DB-1.7.11-1.fc7 (2007-0249)
1.7.11 : fbsql : - Fixed commit and rollback to specify the handle to be used. 1.7.10 : mysqli : - Added a type map for BIT fields. 1.7.9 : sybase : - Added divide by zero error mapping. - Added a specific quoteFloat implementation along the same lines as fbsql. - Updated tableInfo to cope with o...
openSUSE 10 Security Update : mono-core (mono-core-2373)
By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2373...
CVE-2002-2250
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via 1 a long parameter to the xpfreedll extended stored procedure or 2 a long database name argument to the DBCC CHECKVERIFY function...
CVE-2002-2250
CVE-2002-2250 affects Sybase Adaptive Server 12.0 and 12.5, with two described vectors causing remote arbitrary code execution via (1) a long parameter to xp_freedll and (2) a long database name argument to DBCC CHECKVERIFY. Root cause: multiple buffer overflows in these entry points. Impact is r...
CVE-2002-2250: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via 1 a long parameter to the xpfreedll extended stored procedure or 2 a long database name argument to the DBCC CHECKVERIFY function...