Unscored CVE-2011-0497 EUVD-2011-0517GHSA-hcjh-vxw9-5294

Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), …

Published Jan 20, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.

References

easerver-unspec-file-include(64695) vdb-entry
42904 third-party-advisory
http://www.sybase.com/detail?id=1091057
45809 vdb-entry
70427 vdb-entry
20110110 Sybase EAServer Remote Directory Traversal Vulnerability third-party-advisory
ADV-2011-0125 vdb-entry