Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-0912

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2008-0912
Last Modified 07 Mar 2011 10:05:39
Published 22 Feb 2008 06:44:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-0912

Summary

Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long (1) username, (2) version, or (3) remote ID. NOTE: some of these details are obtained from third party information.

Vulnerable Systems

Application

  • Sybase Mobilink 10.0.1.3629

  • Sybase Sql Anywhere 10.0.1.3415


References

VUPEN - ADV-2008-0626

SECTRACK - 1019469

BID - 27914

BUGTRAQ - 20080328 Re: Heap overflow in Sybase MobiLink 10.0.1.3629

BUGTRAQ - 20080220 Heap overflow in Sybase MobiLink 10.0.1.3629

SECUNIA - 29045

MISC - http://aluigi.altervista.org/adv/mobilinkhof-adv.txt

SREASON - 3691


Last Updated: 27 May 2016 10:46:58