Detections
Analytics
Sybase EAServer 6.3.1 < 6.3.1.07 Build 63107 / 6.2 < 6.2.0.12 Build 62012 Multiple Vulnerabilities
critical Nessus Network Monitor Plugin ID 6895
Synopsis
The remote application server is affected by multiple vulnerabilities.Description
The version of Sybase EAServer installed on the remote host is earlier than 6.3.1.07 Build 63107 or 6.2 earlier 6.2.0.12 Build 62012. As such, it is potentially affected by multiple vulnerabilities :- An unspecified error can be exploited to access otherwise inaccessible, deployed applications.
- An unspecified error can be exploited to disclose contents of arbitrary directories and files.
- An unspecified error within the WSH service can be exploited to disclose certain credentials from unspecified configuration files and execute arbitrary OS commands.
Note that the second and third issues only affect version 6.3.1 of EAServer.
Solution
Upgrade to Sybase EAServer 6.2.0.12 Build 62012 / 6.3.1.07 Build 63107 or later.See Also
Plugin Details
Severity: Critical
ID: 6895
Family: Web Servers
Published: 6/28/2013
Updated: 3/6/2019
Risk Information
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:sybase:easerver
Patch Publication Date: 6/17/2013
Vulnerability Publication Date: 6/17/2013