Sybase EAServer Remote Buffer Overflow Vulnerability

Bugtraq ID:	14287
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 15 2005 12:00AM
Updated:	Apr 17 2006 06:41PM
Credit:	David Dewey of SPI Labs is credited with the discovery of this issue.
Vulnerable:	Sybase Enterprise Application Server 5.2 Sybase Enterprise Application Server 5.1 Sybase Enterprise Application Server 5.0 Sybase Enterprise Application Server 4.2.5 Sybase Enterprise Application Server 4.2.2 Sybase Enterprise Application Server 4.2
Not Vulnerable:

Sybase EAServer Remote Buffer Overflow Vulnerability

Sybase EAServer is affected by a remote buffer-overflow vulnerability.

The vulnerability exists in the server's WebConsole. A successful attack can overflow a finite-sized buffer and ultimately lead to arbitrary code execution in the context of the 'jagsrv.exe' process. This may allow the attacker to gain elevated privileges.

Note that an attacker needs to provide authentication credentials before carrying out this attack.

Sybase EAServer Remote Buffer Overflow Vulnerability


An exploit has been provided.

• /data/vulnerabilities/exploits/sybase_easerver.pm

Sybase EAServer Remote Buffer Overflow Vulnerability

Solution:
The vendor has released updates to address this issue. Please see the referenced Sybase alert for more information.

Sybase EAServer Remote Buffer Overflow Vulnerability

References:

• Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2 (SPI Dynamics)
  
• Urgent from Sybase: Security Issue in EAServer 5.2 and Earlier (Sybase)