medium4.6Public exploit code
CVE-2005-2297
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javas…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sybase EAServer 5.2 - Remote Stack Buffer Overflow (Metasploit)2010-06-22 · remote · windows · Verified
Impact
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sybase | Easerver | Versions 4.2.5, 5.0, 5.1, 5.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112146180532313&w=2
- http://secunia.com/advisories/16108
- http://securitytracker.com/id?1014497
- http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm
- http://www.sybase.com/detail?id=1036742
- http://marc.info/?l=bugtraq&m=112146180532313&w=2
- http://secunia.com/advisories/16108
- http://securitytracker.com/id?1014497
- http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm
- http://www.sybase.com/detail?id=1036742