CVE-2005-2297 Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.
MediumCVSS 4.6
EPSS 74.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sybase easerver | = 4.2.5 | No fix listed |
| sybase easerver | = 5.0 | No fix listed |
| sybase easerver | = 5.1 | No fix listed |
| sybase easerver | = 5.2 | No fix listed |
References
- 20050715 Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2 mailing-list
- 16108 third-party-advisory
- 1014497 vdb-entry
- www.spidynamics.com patch vendor-advisory
- www.sybase.com patch vendor-advisory