Vulnerabilities > Sybase
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-12-15 | CVE-2003-0327 | Unspecified vulnerability in Sybase Adaptive Server Enterprise 12.5 Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote password array with an invalid length, which triggers a heap-based buffer overflow. | 5.0 |
| 2002-12-31 | CVE-2002-2250 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Sybase Adaptive Server 12.0/12.5 Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function. | 10.0 |
| 2002-12-31 | CVE-2002-1861 | Unspecified vulnerability in Sybase Easerver 4.0 Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). | 5.0 |
| 2001-08-02 | CVE-2001-0599 | Buffer Overflow vulnerability in Sybase Adaptive Server Anywhere 6.0.3.2747 Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638. | 5.0 |
| 2000-04-11 | CVE-1999-0695 | Unspecified vulnerability in Sybase Powerdynamo 3.0.652 The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. | 5.0 |