Sybase EAServer Multiple Vulnerabilities
BID:45809
Info
Sybase EAServer Multiple Vulnerabilities
| Bugtraq ID: | 45809 |
| Class: | Unknown |
| CVE: |
CVE-2011-0496 CVE-2011-0497 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2011 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | iDefense Labs |
| Vulnerable: |
Sybase EAServer 6.3 Sybase EAServer 6.0 Sybase EAServer 5.5 Sybase EAServer 5.3 Sybase EAServer 5.2 Sybase EAServer 5.1 Sybase EAServer 5.0 |
| Not Vulnerable: | |
Discussion
Sybase EAServer Multiple Vulnerabilities
Sybase EAServer is prone to a security-bypass vulnerability and a directory-traversal vulnerability.
Attackers may exploit these issues to execute arbitrary code within the context of the application or to disclose sensitive information.
Sybase EAServer versions 6.3 and prior are affected.
Sybase EAServer is prone to a security-bypass vulnerability and a directory-traversal vulnerability.
Attackers may exploit these issues to execute arbitrary code within the context of the application or to disclose sensitive information.
Sybase EAServer versions 6.3 and prior are affected.
Exploit / POC
Sybase EAServer Multiple Vulnerabilities
Attackers can exploit these issues using a browser.
Attackers can exploit these issues using a browser.
Solution / Fix
Sybase EAServer Multiple Vulnerabilities
Solution:
Vendor patches are available. Please see the references for more information.
Solution:
Vendor patches are available. Please see the references for more information.