CVEvulnerability

CVE-2011-0497

7.8 HIGH Published 2011-01-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-01-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.

Affected configurations

• sybase appeon for powerbuilder 2.5 • sybase appeon for powerbuilder 2.6 • sybase appeon for powerbuilder 2.7 • sybase appeon for powerbuilder 2.8 • sybase appeon for powerbuilder 6.0 • sybase appeon for powerbuilder 6.1 • sybase appeon for powerbuilder 6.2 • sybase appeon for powerbuilder 6.5 • sybase easerver 5.0 • sybase easerver 5.0.1 • sybase easerver 5.1 • sybase easerver 5.2 • sybase easerver 5.2.1 • sybase easerver 5.3 • sybase easerver 5.5 • sybase easerver 6.0 • sybase easerver 6.0.2 • sybase easerver 6.1 • sybase easerver 6.2 • sybase easerver 6.3 • sybase easerver 6.3.1 • sybase replication server • sybase replication server 15.2 • sybase sybase workspace • sybase sybase workspace 1.0 • sybase sybase workspace 1.5 • sybase sybase workspace 1.6 • sybase sybase workspace 1.7 • sybase sybase workspace 2.0 • sybase sybase workspace 2.0.1 • sybase sybase workspace 2.0.2 • sybase sybase workspace 2.1 • sybase sybase workspace 2.1.2 • sybase sybase workspace 2.5

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References