high7.8
CVE-2011-0497
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allow…
Impact
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sybase | Appeon For Powerbuilder | Versions 2.5, 2.6, 2.7, 2.8, 6.0, 6.1 |
| Sybase | Easerver | Versions 5.0, 5.0.1, 5.1, 5.2, 5.2.1, 5.3 |
| Sybase | Replication Server | All versions Version 15.2 |
| Sybase | Sybase Workspace | All versions Versions 1.0, 1.5, 1.6, 1.7, 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889
- http://osvdb.org/70427
- http://secunia.com/advisories/42904
- http://www.securityfocus.com/bid/45809
- http://www.sybase.com/detail?id=1091057
- http://www.vupen.com/english/advisories/2011/0125
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64695
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889
- http://osvdb.org/70427
- http://secunia.com/advisories/42904
- http://www.securityfocus.com/bid/45809
- http://www.sybase.com/detail?id=1091057
- http://www.vupen.com/english/advisories/2011/0125
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64695