Sybase Adaptive Server Enterprise XP_Server Remote Denial Of Service Vulnerability

Bugtraq ID:	13013
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 22 2004 12:00AM
Updated:	Dec 22 2004 12:00AM
Credit:	Discovery is credited to Sherief Hammad of NGSSoftware.
Vulnerable:	Sybase Adaptive Server Enterprise 12.5.3 Sybase Adaptive Server Enterprise 12.5.2 Sybase Adaptive Server Enterprise 12.5 Win - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 Sybase Adaptive Server Enterprise 12.5 Sun - Sun Solaris 2.7 - Sun Solaris 2.6 Sybase Adaptive Server Enterprise 12.5 SGI - SGI IRIX 6.5 Sybase Adaptive Server Enterprise 12.5 Linux Sybase Adaptive Server Enterprise 12.5 HP - HP HP-UX 11.0 Sybase Adaptive Server Enterprise 12.5 Digital UNIX - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 d Sybase Adaptive Server Enterprise 12.0.1 Win - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 Sybase Adaptive Server Enterprise 12.0.1 Sun - Sun Solaris 2.7 - Sun Solaris 2.6 Sybase Adaptive Server Enterprise 12.0.1 HP - HP HP-UX 11.0 Sybase Adaptive Server Enterprise 12.0.1 Digital UNIX - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 d Sybase Adaptive Server Enterprise 12.0 Win - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 Sybase Adaptive Server Enterprise 12.0 Sun - Sun Solaris 2.7 - Sun Solaris 2.6 Sybase Adaptive Server Enterprise 12.0 HP - HP HP-UX 11.0 Sybase Adaptive Server Enterprise 12.0 Digital UNIX - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 a Sybase Adaptive Server Enterprise 12.0 .0.8 EDS#3 Sybase Adaptive Server Enterprise 11.9.2 Win - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 Sybase Adaptive Server Enterprise 11.9.2 Sun - Sun Solaris 2.5.1 - Sun Solaris 2.7 - Sun Solaris 2.6 Sybase Adaptive Server Enterprise 11.9.2 HP - HP HP-UX 11.0 Sybase Adaptive Server Enterprise 11.9.2 Digital UNIX - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 a Sybase Adaptive Server Enterprise 11.5.1 Win - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 Sybase Adaptive Server Enterprise 11.5.1 Sun - Sun Solaris 2.5.1 - Sun Solaris 2.7 - Sun Solaris 2.6 Sybase Adaptive Server Enterprise 11.5.1 HP - HP HP-UX 11.0 Sybase Adaptive Server Enterprise 11.5.1 Digital UNIX - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 a Sybase Adaptive Server Enterprise 11.5 Win - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 Sybase Adaptive Server Enterprise 11.5 Sun - Sun Solaris 2.5.1 - Sun Solaris 2.7 - Sun Solaris 2.6 Sybase Adaptive Server Enterprise 11.5 HP - HP HP-UX 11.0 Sybase Adaptive Server Enterprise 11.5 Digital UNIX - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 a Sybase Adaptive Server Enterprise 11.0.3 .3Linux
Not Vulnerable:	Sybase Adaptive Server Enterprise 12.5.3 ESD#1

Sybase Adaptive Server Enterprise XP_Server Remote Denial Of Service Vulnerability

Sybase Adaptive Server Enterprise XP_SERVER is affected by a remote denial of service vulnerability. This issue is due to a failure of the affected application to properly handle malformed network data.

A remote attacker can leverage this issue to cause the affected XP_SERVER to crash, denying service to legitimate users.

The issue outlined in this BID was previously presented in BID 12080 (Sybase Adaptive Server Enterprise Multiple Vulnerabilities) along with other issues; each issue is being assigned its own BID. This BID 12080 is being retired.

Sybase Adaptive Server Enterprise XP_Server Remote Denial Of Service Vulnerability

No exploit is required to leverage this issue.

Sybase Adaptive Server Enterprise XP_Server Remote Denial Of Service Vulnerability

Solution:
The vendor has released ASE 12.5.3 ESD#1 to address these issue.


Sybase Adaptive Server Enterprise 11.0.3 .3Linux

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5 Digital UNIX

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5 HP

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5 Sun

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5 Win

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5.1 Win

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5.1 Sun

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5.1 Digital UNIX

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.5.1 HP

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.9.2 Digital UNIX

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.9.2 Sun

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.9.2 HP

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 11.9.2 Win

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0 Digital UNIX

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0 HP

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0 Sun

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0 Win

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0.1 Sun

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0.1 Digital UNIX

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0.1 HP

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.0.1 Win

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5 Win

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5 HP

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5 Linux

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5 SGI

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5 Sun

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5 Digital UNIX

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5.2

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise 12.5.3

• Sybase ASE 12.5.3 ESD#1
  http://downloads.sybase.com/

Sybase Adaptive Server Enterprise XP_Server Remote Denial Of Service Vulnerability

References:

• Adaptive Server Anywhere Homepage (Sybase)
  
• Adaptive Server Enterprise - Companion TechNote to UCN entitled Urgent from Syba (Sybase)
  
• Sybase Homepage (Sybase)
  
• Urgent from Sybase: Security Issues in ASE 12.5.3 and Earlier (Sybase)
  
• Sybase ASE 12.5.2 vulnerabilities (NGSSoftware Insight Security Research )
  
• Sybase ASE Multiple Security Issues (#NISR05042005) (NGSSoftware Insight Security Research )