CVE-2011-0497 Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary file...
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../" (dot dot forward-slash backslash) sequences in a crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sybase appeon for powerbuilder | = 2.5 | No fix listed |
| sybase appeon for powerbuilder | = 2.6 | No fix listed |
| sybase appeon for powerbuilder | = 2.7 | No fix listed |
| sybase appeon for powerbuilder | = 2.8 | No fix listed |
| sybase appeon for powerbuilder | = 6.0 | No fix listed |
| sybase appeon for powerbuilder | = 6.1 | No fix listed |
| sybase appeon for powerbuilder | = 6.2 | No fix listed |
| sybase appeon for powerbuilder | = 6.5 | No fix listed |
| sybase easerver | = 5.0 | No fix listed |
| sybase easerver | = 5.0.1 | No fix listed |
| sybase easerver | = 5.1 | No fix listed |
| sybase easerver | = 5.2 | No fix listed |
| sybase easerver | = 5.2.1 | No fix listed |
| sybase easerver | = 5.3 | No fix listed |
| sybase easerver | = 5.5 | No fix listed |
| sybase easerver | = 6.0 | No fix listed |
| sybase easerver | = 6.0.2 | No fix listed |
| sybase easerver | = 6.1 | No fix listed |
| sybase easerver | = 6.2 | No fix listed |
| sybase easerver | = 6.3 | No fix listed |
| sybase easerver | = 6.3.1 | No fix listed |
| sybase replication server | All versions | No fix listed |
| sybase replication server | = 15.2 | No fix listed |
| sybase workspace | All versions | No fix listed |
| sybase workspace | = 1.0 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sybase workspace | = 1.5 | No fix listed |
| sybase workspace | = 1.6 | No fix listed |
| sybase workspace | = 1.7 | No fix listed |
| sybase workspace | = 2.0 | No fix listed |
| sybase workspace | = 2.0.1 | No fix listed |
| sybase workspace | = 2.0.2 | No fix listed |
| sybase workspace | = 2.1 | No fix listed |
| sybase workspace | = 2.1.2 | No fix listed |
| sybase workspace | = 2.5 | No fix listed |
References
- 20110110 Sybase EAServer Remote Directory Traversal Vulnerability third-party-advisory
- 70427 vdb-entry
- 42904 third-party-advisory vendor-advisory
- 45809 vdb-entry
- www.sybase.com vendor-advisory
- ADV-2011-0125 vdb-entry vendor-advisory
- easerver-unspec-file-include(64695) vdb-entry