ID CVE-2005-0942
Summary The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.
References
Vulnerable Configurations
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 12080
bugtraq
  • 20041222 Sybase ASE 12.5.2 vulnerabilities
  • 20050321 Details of Sybase ASE bugs withheld
  • 20050405 Sybase ASE Multiple Security Issues (#NISR05042005)
confirm
misc http://www.ngssoftware.com/advisories/sybase-ase.txt
secunia 13632
xf sybase-adaptive-server(19354)
Last major update 11-07-2017 - 01:32
Published 02-05-2005 - 04:00
Last modified 11-07-2017 - 01:32
Back to Top