Search criteria
6 vulnerabilities found for appeon_for_powerbuilder by sybase
FKIE_CVE-2011-0497
Vulnerability from fkie_nvd - Published: 2011-01-20 19:00 - Updated: 2025-04-11 00:51
Severity ?
Summary
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| sybase | appeon_for_powerbuilder | 2.5 | |
| sybase | appeon_for_powerbuilder | 2.6 | |
| sybase | appeon_for_powerbuilder | 2.7 | |
| sybase | appeon_for_powerbuilder | 2.8 | |
| sybase | appeon_for_powerbuilder | 6.0 | |
| sybase | appeon_for_powerbuilder | 6.1 | |
| sybase | appeon_for_powerbuilder | 6.2 | |
| sybase | appeon_for_powerbuilder | 6.5 | |
| sybase | easerver | 5.0 | |
| sybase | easerver | 5.0.1 | |
| sybase | easerver | 5.1 | |
| sybase | easerver | 5.2 | |
| sybase | easerver | 5.2.1 | |
| sybase | easerver | 5.3 | |
| sybase | easerver | 5.5 | |
| sybase | easerver | 6.0 | |
| sybase | easerver | 6.0.2 | |
| sybase | easerver | 6.1 | |
| sybase | easerver | 6.2 | |
| sybase | easerver | 6.3 | |
| sybase | easerver | 6.3.1 | |
| sybase | replication_server | * | |
| sybase | replication_server | 15.2 | |
| sybase | sybase_workspace | * | |
| sybase | sybase_workspace | 1.0 | |
| sybase | sybase_workspace | 1.5 | |
| sybase | sybase_workspace | 1.6 | |
| sybase | sybase_workspace | 1.7 | |
| sybase | sybase_workspace | 2.0 | |
| sybase | sybase_workspace | 2.0.1 | |
| sybase | sybase_workspace | 2.0.2 | |
| sybase | sybase_workspace | 2.1 | |
| sybase | sybase_workspace | 2.1.2 | |
| sybase | sybase_workspace | 2.5 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "4D62642B-745C-4128-806B-ECE8D2012F30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D7952FFD-2A2C-413C-B5AF-011D768E3D9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "F34DD97E-424A-4F4C-8A35-3D836B07572B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.8:*:*:*:*:*:*:*",
"matchCriteriaId": "EDB02E39-393E-42B7-9815-40CCDC00BD5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CC45E1C7-53A6-4010-92F3-D58CAE635115",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4661B9C5-8B48-4E23-8873-67A2DD24E9BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BB486446-9589-48A5-B43D-7A04CC092399",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E66D15BF-A87E-4049-AF24-1BD8503BE9D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "31C604B5-7CAB-4D38-981A-E8543B717FE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9F57E9C2-7D2B-42CF-9224-50E7E82473A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "53125F6B-62E4-4E03-B8B5-602949EB394F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BF9C6A53-8D65-4B4D-88A4-2F43D0823B7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0F4C802B-73A3-4FB2-9A9D-83964684E812",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A7920CE9-8B9D-46BB-AEBC-7C129CB3C8BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FFB72B90-1DD3-4BA8-9527-68C6F421890A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EEC9CE22-7E0B-44C4-9751-B991869B5C62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F3483B91-54D6-4D5F-9ED2-9FCAC797366D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0179A93F-EE13-4BCC-BBA8-E4077129F14B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BDBC1329-7165-48E5-A3DA-CB71DD421DD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D2309396-F172-4E05-BF7A-8FED42F53CBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "033090D0-F295-406C-A14F-DE06EF0F04C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:replication_server:*:*:messaging:*:*:*:*:*",
"matchCriteriaId": "361B2EF0-F2DF-44B1-A3EA-11C2D67659D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:replication_server:15.2:*:messaging:*:*:*:*:*",
"matchCriteriaId": "2866AAA5-84AD-4955-BE91-3D59DA3CADC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DF399757-2A1D-4953-B5CD-84BC652BC9D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6009B1EF-4D54-49D7-840D-201AE30DB362",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "9C638C06-3821-41C8-AA58-436E34DA260A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "35DD1E08-B6BD-4BBC-B852-34FFBFB13AE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "D06E6BCB-5115-4215-8CDE-CF8F1B12BC81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F6443AD8-5857-407D-82E2-472F70B45D30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17074B83-40EF-4C5C-A070-DA343EC98B57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2210F86E-C5E4-4869-9C79-F6E39B99AB96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EB094768-562C-472C-B1C1-F4FAF2E31B17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F31E2FB2-60DE-4480-850A-E0FB02C88193",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C3798814-4599-4372-AA9F-C75919DA946A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
},
{
"lang": "es",
"value": "Una vulnerabilidad de salto de directorio en EAServer de Sybase versiones 6.x anteriores a 6.3 ESD-2, tal y como es usado en Appeon, Replication Server Messaging Edition (RSME) y WorkSpace, permite a los atacantes remotos leer archivos arbitrarios por medio de \"../\\\" (punto punto seguido de barra diagonal y barra invertida) en una petici\u00f3n especialmente dise\u00f1ada."
}
],
"id": "CVE-2011-0497",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-01-20T19:00:09.803",
"references": [
{
"source": "cve@mitre.org",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/70427"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42904"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/70427"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42904"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-22"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2011-0496
Vulnerability from fkie_nvd - Published: 2011-01-20 19:00 - Updated: 2025-04-11 00:51
Severity ?
Summary
Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability."
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| sybase | appeon_for_powerbuilder | 2.5 | |
| sybase | appeon_for_powerbuilder | 2.6 | |
| sybase | appeon_for_powerbuilder | 2.7 | |
| sybase | appeon_for_powerbuilder | 2.8 | |
| sybase | appeon_for_powerbuilder | 6.0 | |
| sybase | appeon_for_powerbuilder | 6.1 | |
| sybase | appeon_for_powerbuilder | 6.2 | |
| sybase | appeon_for_powerbuilder | 6.5 | |
| sybase | easerver | 5.0 | |
| sybase | easerver | 5.0.1 | |
| sybase | easerver | 5.1 | |
| sybase | easerver | 5.2 | |
| sybase | easerver | 5.2.1 | |
| sybase | easerver | 5.3 | |
| sybase | easerver | 5.5 | |
| sybase | easerver | 6.0 | |
| sybase | easerver | 6.0.2 | |
| sybase | easerver | 6.1 | |
| sybase | easerver | 6.2 | |
| sybase | easerver | 6.3 | |
| sybase | easerver | 6.3.1 | |
| sybase | replication_server | * | |
| sybase | replication_server | 15.2 | |
| sybase | sybase_workspace | * | |
| sybase | sybase_workspace | 1.0 | |
| sybase | sybase_workspace | 1.5 | |
| sybase | sybase_workspace | 1.6 | |
| sybase | sybase_workspace | 1.7 | |
| sybase | sybase_workspace | 2.0 | |
| sybase | sybase_workspace | 2.0.1 | |
| sybase | sybase_workspace | 2.0.2 | |
| sybase | sybase_workspace | 2.1 | |
| sybase | sybase_workspace | 2.1.2 | |
| sybase | sybase_workspace | 2.5 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "4D62642B-745C-4128-806B-ECE8D2012F30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D7952FFD-2A2C-413C-B5AF-011D768E3D9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "F34DD97E-424A-4F4C-8A35-3D836B07572B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.8:*:*:*:*:*:*:*",
"matchCriteriaId": "EDB02E39-393E-42B7-9815-40CCDC00BD5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CC45E1C7-53A6-4010-92F3-D58CAE635115",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4661B9C5-8B48-4E23-8873-67A2DD24E9BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BB486446-9589-48A5-B43D-7A04CC092399",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E66D15BF-A87E-4049-AF24-1BD8503BE9D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "31C604B5-7CAB-4D38-981A-E8543B717FE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9F57E9C2-7D2B-42CF-9224-50E7E82473A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "53125F6B-62E4-4E03-B8B5-602949EB394F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BF9C6A53-8D65-4B4D-88A4-2F43D0823B7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0F4C802B-73A3-4FB2-9A9D-83964684E812",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A7920CE9-8B9D-46BB-AEBC-7C129CB3C8BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FFB72B90-1DD3-4BA8-9527-68C6F421890A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EEC9CE22-7E0B-44C4-9751-B991869B5C62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F3483B91-54D6-4D5F-9ED2-9FCAC797366D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0179A93F-EE13-4BCC-BBA8-E4077129F14B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BDBC1329-7165-48E5-A3DA-CB71DD421DD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D2309396-F172-4E05-BF7A-8FED42F53CBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "033090D0-F295-406C-A14F-DE06EF0F04C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:replication_server:*:*:messaging:*:*:*:*:*",
"matchCriteriaId": "361B2EF0-F2DF-44B1-A3EA-11C2D67659D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:replication_server:15.2:*:messaging:*:*:*:*:*",
"matchCriteriaId": "2866AAA5-84AD-4955-BE91-3D59DA3CADC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DF399757-2A1D-4953-B5CD-84BC652BC9D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6009B1EF-4D54-49D7-840D-201AE30DB362",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "9C638C06-3821-41C8-AA58-436E34DA260A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "35DD1E08-B6BD-4BBC-B852-34FFBFB13AE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "D06E6BCB-5115-4215-8CDE-CF8F1B12BC81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F6443AD8-5857-407D-82E2-472F70B45D30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17074B83-40EF-4C5C-A070-DA343EC98B57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2210F86E-C5E4-4869-9C79-F6E39B99AB96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EB094768-562C-472C-B1C1-F4FAF2E31B17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F31E2FB2-60DE-4480-850A-E0FB02C88193",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C3798814-4599-4372-AA9F-C75919DA946A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a \"design vulnerability.\""
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en Sybase EAServer v5.x y v6.x anterior a v6.3 ESD#2, como el utilizado en Appeon, Replication Server Messaging Edition (RSME), y WorkSpace, permite a atacantes remotos instalar servicios web y ejecutar c\u00f3digo de su elecci\u00f3n. Relacionado con una \u00abvulnerabilidad inherente\u00bb."
}
],
"evaluatorImpact": "Per: http://www.sybase.com/detail?id=1091057\r\n\r\n\u0027 Remote exploitation of a design vulnerability in Sybase EAServer could allow an attacker to install arbitrary web services, this condition can result in arbitrary code execution allowing attacker to gain control over the affected machine.\r\n\r\nThis also affects those products that include EAServer: Appeon, Replication Server Messaging Edition, and WorkSpace.\u0027",
"id": "CVE-2011-0496",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-01-20T19:00:09.757",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/70428"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42904"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/70428"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42904"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2011-0497 (GCVE-0-2011-0497)
Vulnerability from cvelistv5 – Published: 2011-01-20 18:00 – Updated: 2024-08-06 21:58
VLAI?
Summary
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T21:58:24.552Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "easerver-unspec-file-include(64695)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/42904"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE",
"x_transferred"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-11T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "easerver-unspec-file-include(64695)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/42904"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-0497",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "easerver-unspec-file-include(64695)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/42904"
},
{
"name": "http://www.sybase.com/detail?id=1091057",
"refsource": "CONFIRM",
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"refsource": "OSVDB",
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-0497",
"datePublished": "2011-01-20T18:00:00",
"dateReserved": "2011-01-20T00:00:00",
"dateUpdated": "2024-08-06T21:58:24.552Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2011-0496 (GCVE-0-2011-0496)
Vulnerability from cvelistv5 – Published: 2011-01-20 18:00 – Updated: 2024-08-06 21:58
VLAI?
Summary
Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability."
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T21:58:24.444Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/42904"
},
{
"name": "70428",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70428"
},
{
"name": "easerver-web-services-code-exec(64697)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-11T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a \"design vulnerability.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/42904"
},
{
"name": "70428",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70428"
},
{
"name": "easerver-web-services-code-exec(64697)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-0496",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a \"design vulnerability.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "42904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/42904"
},
{
"name": "70428",
"refsource": "OSVDB",
"url": "http://osvdb.org/70428"
},
{
"name": "easerver-web-services-code-exec(64697)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
},
{
"name": "http://www.sybase.com/detail?id=1091057",
"refsource": "CONFIRM",
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "ADV-2011-0125",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-0496",
"datePublished": "2011-01-20T18:00:00",
"dateReserved": "2011-01-20T00:00:00",
"dateUpdated": "2024-08-06T21:58:24.444Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2011-0497 (GCVE-0-2011-0497)
Vulnerability from nvd – Published: 2011-01-20 18:00 – Updated: 2024-08-06 21:58
VLAI?
Summary
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T21:58:24.552Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "easerver-unspec-file-include(64695)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/42904"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE",
"x_transferred"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-11T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "easerver-unspec-file-include(64695)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/42904"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-0497",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "easerver-unspec-file-include(64695)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/42904"
},
{
"name": "http://www.sybase.com/detail?id=1091057",
"refsource": "CONFIRM",
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"refsource": "OSVDB",
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-0497",
"datePublished": "2011-01-20T18:00:00",
"dateReserved": "2011-01-20T00:00:00",
"dateUpdated": "2024-08-06T21:58:24.552Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2011-0496 (GCVE-0-2011-0496)
Vulnerability from nvd – Published: 2011-01-20 18:00 – Updated: 2024-08-06 21:58
VLAI?
Summary
Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability."
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T21:58:24.444Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/42904"
},
{
"name": "70428",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70428"
},
{
"name": "easerver-web-services-code-exec(64697)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-11T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a \"design vulnerability.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/42904"
},
{
"name": "70428",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70428"
},
{
"name": "easerver-web-services-code-exec(64697)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-0496",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a \"design vulnerability.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "42904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/42904"
},
{
"name": "70428",
"refsource": "OSVDB",
"url": "http://osvdb.org/70428"
},
{
"name": "easerver-web-services-code-exec(64697)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64697"
},
{
"name": "http://www.sybase.com/detail?id=1091057",
"refsource": "CONFIRM",
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "ADV-2011-0125",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-0496",
"datePublished": "2011-01-20T18:00:00",
"dateReserved": "2011-01-20T00:00:00",
"dateUpdated": "2024-08-06T21:58:24.444Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}