PT-2014-5336 · Sap · Sap Sybase Esp

Published 2014-05-22 · Updated 2014-05-22 · CVE-2014-3457

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions SAP Sybase ESP (affected versions not specified)

Description The issue affects the SAP Sybase ESP, where remote code execution is possible due to vulnerabilities in the esp parse connection. The vulnerabilities are related to various methods, including getFieldNames, getTableNames, isInput, dispose, getConnection, setScanDepth, canDiscover, destroy, setParams, getSampleRow, getFieldTypes, reset, and getError.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-3457

ZDI-14-146

ZDI-14-147

ZDI-14-148

ZDI-14-149

ZDI-14-150

ZDI-14-151

ZDI-14-152

ZDI-14-153

ZDI-14-154

ZDI-14-155

ZDI-14-156

ZDI-14-157

ZDI-14-158

Affected Products

Sap Sybase Esp

References · 13

• https://zerodayinitiative.com/advisories/ZDI-14-156 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-146 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-151 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-152 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-148 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-155 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-154 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-157 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-147 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-149 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-150 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-158 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-153 · Security Note