Description
EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles.
References
- easerver-password-disclosure(25777) vdb-entry
- 17508 vdb-entry
- 19605 third-party-advisory
- ADV-2006-1344 vdb-entry
- http://www.sybase.com/detail?id=1040117
- 1015913 vdb-entry