PT-2014-5336 · Sap · Sap Sybase Esp

Publicado 2014-05-22 · Atualizado 2014-05-22 · CVE-2014-3457

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions SAP Sybase ESP (affected versions not specified)

Description The issue affects the SAP Sybase ESP, where remote code execution is possible due to vulnerabilities in the esp parse connection. The vulnerabilities are related to various methods, including getFieldNames, getTableNames, isInput, dispose, getConnection, setScanDepth, canDiscover, destroy, setParams, getSampleRow, getFieldTypes, reset, and getError.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-3457

ZDI-14-146

ZDI-14-147

ZDI-14-148

ZDI-14-149

ZDI-14-150

ZDI-14-151

ZDI-14-152

ZDI-14-153

ZDI-14-154

ZDI-14-155

ZDI-14-156

ZDI-14-157

ZDI-14-158

Produtos afetados

Sap Sybase Esp

Referências · 13

• https://zerodayinitiative.com/advisories/ZDI-14-156 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-146 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-151 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-152 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-148 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-155 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-154 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-157 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-147 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-149 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-150 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-158 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-153 · Nota de Segurança