CVE-2005-2297 - Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter

Back Back to CVE browser

MEDIUM

Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter

Published Jul 19, 2005

4.6

MEDIUM

CVSS 2.0

EPSS 74.20%

Description

Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://marc.info/?l=bugtraq&m=112146180532313&w=2
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/16108
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1014497
vdb-entryx_refsource_SECTRACK
http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm
x_refsource_MISCPatchVendor Advisory
http://www.sybase.com/detail?id=1036742
x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2298
Advisory

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=112146180532313&w=2		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/16108		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1014497		vdb-entryx_refsource_SECTRACK
http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm		x_refsource_MISCPatchVendor Advisory
http://www.sybase.com/detail?id=1036742		x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2298		Advisory