CVEvulnerability
CVE-2008-0912
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long (1) username, (2) version, or (3) remote ID. NOTE: some of these details are obtained from third party information.
Affected configurations
• sybase mobilink (<= 10.0.1.3629)
• sybase sql anywhere 10.0.1.3415
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://aluigi.altervista.org/adv/mobilinkhof-adv.txt Exploit
- http://secunia.com/advisories/29045 Vendor Advisory
- http://securityreason.com/securityalert/3691 securityreason.com
- http://www.securityfocus.com/archive/1/488409/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490259/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27914 www.securityfocus.com
- http://www.securitytracker.com/id?1019469 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0626 www.vupen.com
- http://aluigi.altervista.org/adv/mobilinkhof-adv.txt Exploit
- http://secunia.com/advisories/29045 Vendor Advisory
- http://securityreason.com/securityalert/3691 securityreason.com
- http://www.securityfocus.com/archive/1/488409/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490259/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27914 www.securityfocus.com
- http://www.securitytracker.com/id?1019469 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0626 www.vupen.com