CVE-2006-3667
https://notcve.org/view.php?id=CVE-2006-3667
Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors. Vulnerabilidad no especificada en Sybase/Financial Fusion Consumer Banking Suite versiones anteriores a 20060706 tiene un impacto desconocido y vectores de ataque remotos. • http://secunia.com/advisories/21004 http://securitytracker.com/id?1016533 http://www.securityfocus.com/bid/19076 http://www.sybase.com/detail?id=1041431 http://www.vupen.com/english/advisories/2006/2881 •
CVE-2006-2539
https://notcve.org/view.php?id=CVE-2006-2539
Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText function in javax.swing.JPasswordField component. • http://secunia.com/advisories/20145 http://www.securityfocus.com/bid/18036 http://www.sybase.com/detail?id=1040665 http://www.vupen.com/english/advisories/2006/1869 https://exchange.xforce.ibmcloud.com/vulnerabilities/26567 •
CVE-2006-1997
https://notcve.org/view.php?id=CVE-2006-1997
Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors. • http://secunia.com/advisories/19784 http://www.securityfocus.com/bid/17677 http://www.sybase.com/detail?id=1040213 http://www.vupen.com/english/advisories/2006/1477 https://exchange.xforce.ibmcloud.com/vulnerabilities/25989 •
CVE-2006-1829
https://notcve.org/view.php?id=CVE-2006-1829
EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles. • http://secunia.com/advisories/19605 http://securitytracker.com/id?1015913 http://www.securityfocus.com/bid/17508 http://www.sybase.com/detail?id=1040117 http://www.vupen.com/english/advisories/2006/1344 https://exchange.xforce.ibmcloud.com/vulnerabilities/25777 •
CVE-2005-2297 – Sybase EAServer 5.2 - Remote Stack Buffer Overflow
https://notcve.org/view.php?id=CVE-2005-2297
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter. Desbordamiento de búfer en TreeAction.do en Sybase EAServer 4.2.5 hasta la 5.2 permite que usuarios autentificados remotamente ejecute código arbitrario mediante un parámtro grande javascript. • https://www.exploit-db.com/exploits/16766 http://marc.info/?l=bugtraq&m=112146180532313&w=2 http://secunia.com/advisories/16108 http://securitytracker.com/id?1014497 http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm http://www.sybase.com/detail?id=1036742 •