Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities
BID:63549
Info
Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities
| Bugtraq ID: | 63549 |
| Class: | Unknown |
| CVE: |
CVE-2013-6868 CVE-2013-6867 CVE-2013-6866 CVE-2013-6865 CVE-2013-6864 CVE-2013-6863 CVE-2013-6862 CVE-2013-6861 CVE-2013-6860 CVE-2013-6859 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Nov 04 2013 12:00AM |
| Updated: | Nov 26 2013 12:37AM |
| Credit: | Martin Rakhmanov and Vladimir Zakharevich of Application Security, Yury Maryshev of Positive Technologies and Shenzhew of Huawei Technology. |
| Vulnerable: |
Sybase Adaptive Server Enterprise 15.0.3 Sybase Adaptive Server Enterprise 15.0.2 Sun Sybase Adaptive Server Enterprise 15.0.2 Linux Sybase Adaptive Server Enterprise 15.0.2 Sybase Adaptive Server Enterprise 15.0 Sybase Adaptive Server Enterprise 15.5 ESD#2 Sybase Adaptive Server Enterprise 15.5 Sybase Adaptive Server Enterprise 15.0.3 ESD#1 |
| Not Vulnerable: | |
Discussion
Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities
Sybase Adaptive Server Enterprise (ASE) is prone to the following security vulnerabilities:
1. An unspecified security-bypass vulnerability
2. Multiple unspecified information-disclosure vulnerabilities
3. Multiple unspecified denial-of-service vulnerabilities
4. Multiple unspecified remote code-execution vulnerabilities
5. A directory-traversal vulnerability
Successfully exploiting these issues allows remote attackers to bypass certain security restrictions, gain access to arbitrary files, disclose sensitive information, and execute arbitrary code in context of the user running the application or cause denial-of-service conditions; other attacks are also possible.
Sybase Adaptive Server Enterprise (ASE) is prone to the following security vulnerabilities:
1. An unspecified security-bypass vulnerability
2. Multiple unspecified information-disclosure vulnerabilities
3. Multiple unspecified denial-of-service vulnerabilities
4. Multiple unspecified remote code-execution vulnerabilities
5. A directory-traversal vulnerability
Successfully exploiting these issues allows remote attackers to bypass certain security restrictions, gain access to arbitrary files, disclose sensitive information, and execute arbitrary code in context of the user running the application or cause denial-of-service conditions; other attacks are also possible.
Exploit / POC
Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Sybase Adaptive Server Enterprise (ASE) Multiple Security Vulnerabilities
References:
References:
- Adaptive Server Enterprise Product Homepage (Sybase)
- Sybase Homepage (Sybase)