468 matches found
CVE-2005-2297
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter...
Sybase EAServer WebConsole jaqadmin Default Password
This host appears to be the running the Sybase EAServer Management with the default administrator accounts still configured jagadmin/''. A potential intruder could reconfigure this service in a way that grants system access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Sybase EAServer buffer overflow
Buffer overflow in TreeAction.do CGI...
Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2
Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2 ----------------------------------------------------------- Release Date: July 15 2005 Severity: Medium A vulnerability has been discovered in Sybase EAServer. If exploited, this can result in user-specified code being executed under the...
CVE-2002-1861
CVE-2002-1861 concerns Sybase Enterprise Application Server 4.0 running on Windows, where a remote attacker could retrieve files from the WEB-INF directory by requesting the directory with a trailing dot (WEB-INF.). This is an information disclosure vulnerability tied to how the server handles WE...
CVE-2002-1861
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...
CVE-2005-0942
The XP Server process xpserver in Sybase Adaptive Server Enterprise ASE XP Server 12.x before 12.5.3 ESD1 allows attackers to cause a denial of service process crash via malformed data sent to the XP Server TCP port...
Sybase ASE database multiple vulnerabilities
Multiple buffer overflows and DoS conditions...
Sybase ASE Multiple Security Issues (#NISR05042005)
NGSSoftware Insight Security Research Advisory Name: Sybase ASE Multiple Security Issues Systems Affected: Sybase ASE versions prior to 12.5.3 ESD1 Severity: High Vendor URL: http://www.sybase.com/ Researchers: Mark Litchfield [email protected] Sherief Hammad [email protected] Chris Anle...
CVE-2005-0942
Affected software: Sybase Adaptive Server Enterprise (ASE) XP Server 12.x. Vulnerable component: XP Server process (xp_server). Root cause: Denial of service caused by processing malformed data sent to the XP Server TCP port, leading to a process crash. Impact: Availability loss for the XP Server...
CVE-2005-0942
The XP Server process xpserver in Sybase Adaptive Server Enterprise ASE XP Server 12.x before 12.5.3 ESD1 allows attackers to cause a denial of service process crash via malformed data sent to the XP Server TCP port...
Sybase SQL sa Account Blank Password
The remote Sybase SQL server has the default 'sa' account enabled without any password. An attacker may use this flaw to execute commands against the remote host as well as read database content. C Tenable Network Security, Inc. This script is based on mssqlblankpassword.nasl which is C H D Moore...
Sybase TCP/IP Listener Service Detection
The remote host is running a Sybase SQL server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17161; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/24"; scriptnameenglish:"Sybase TCP/IP Listener Service Detection";...
Sybase Adaptive Server Enterprise < 12.5.4.0 Multiple Vulnerabilities
The remote host is running Sybase Adaptive Server Enterprise, a SQL server with network capabilities. The remote version of this software is earlier than 12.5.4.0. Such versions are affected by several unspecified security flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...
CVE-2005-0441
Sybase ASE 12.x before 12.5.3 ESD#1 contains multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code via (1) attrib_valid, (2) covert, (3) declare, (4) crafted query plan, or (5) crafted install java statement. Affected versions also include ASE
Sybase ASE 12.5.2 vulnerabilities
Sherief Hammad of NGSSoftware has discovered three high risk security vulnerabilities in Sybase Adaptive Server Enterprise 12.5.2. Sybase ASE versions 12.5.2 and older are vulnerable to these issues. These vulnerabilities have now been fixed by Sybase in the Sybase ASE 12.5.3 interim release whic...
CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...