Sherief Hammad

Researcher fromNGSSoftware

#20964of 60,450

15Total CVSS

Vulnerabilities · 2

Medium

1

High

1

Sybase Adaptive Server Enterprise (Ase) Xp Server

The issue allows attackers to cause a denial of service, resulting in a process crash, by sending malformed data to the XP Server TCP port.

Sap Sybase Adaptive Server Enterprise

The issue allows remote authenticated users to execute arbitrary code via several vulnerable functions, including the `attrib valid` function, `covert` function, `declare` statement, or a crafted query plan. Additionally, remote authenticated users with database owner or "sa" role privileges can execute arbitrary code via a crafted install java statement.