Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities

Bugtraq ID:	54678
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 26 2012 12:00AM
Updated:	Jul 26 2012 12:00AM
Credit:	Martin Rakhmanov, Esteban Martinez Fayo, and Ernesto Cullen
Vulnerable:	Sybase Adaptive Server Enterprise 15.0.3 Sybase Adaptive Server Enterprise 15.5 ESD#2 Sybase Adaptive Server Enterprise 15.0.3 ESD#1
Not Vulnerable:

Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities

Sybase Adaptive Server Enterprise (ASE) is prone to multiple security vulnerabilities, including

1. Multiple security-bypass vulnerabilities.
2. Multiple remote code-execution vulnerabilities.
3. A denial-of-service vulnerability.

Successfully exploiting these issues allows remote attackers to bypass certain security restrictions, execute arbitrary code or cause denial-of-service conditions; other attacks are also possible.

Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities

References:

• Sybase Homepage (Sybase)