[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Directory traversal vulnerability in the HTTP Server in Sybase EAServer

ID: oval:org.secpod.oval:def:3306Date: (C)2011-12-09   (M)2021-06-06
Class: VULNERABILITYFamily: windows




The host is installed with Sybase EAServer 6.3.1 Developer Edition and is prone to a directory traversal vulnerability. A flaw is present in the application, which fails to handle a particular sequence in a path. Successful exploitation could allow attackers to traverse directories and read arbitrary files.

Platform:
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows 7
Product:
Sybase EAServer
Reference:
CVE-2011-2474
CVE    1
CVE-2011-2474
CPE    2
cpe:/a:sybase:easerver
cpe:/a:sybase:easerver:6.3.1::developer

© SecPod Technologies