----------------------------------------------------------------------

The final version of the CSI 6.0 has been released. 
Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/

----------------------------------------------------------------------

TITLE:
Sybase Adaptive Server Enterprise Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA51737

VERIFY ADVISORY:
Secunia.com
http://secunia.com/advisories/51737/
Customer Area (Credentials Required)
https://ca.secunia.com/?page=viewadvisory&vuln_id=51737

RELEASE DATE:
2013-01-08

DISCUSS ADVISORY:
http://secunia.com/advisories/51737/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA:
 * Last Update
 * Popularity
 * Comments
 * Criticality Level
 * Impact
 * Where
 * Solution Status
 * Operating System / Software
 * CVE Reference(s)

http://secunia.com/advisories/51737/

ONLY AVAILABLE IN CUSTOMER AREA:
 * Authentication Level
 * Report Reliability
 * Secunia PoC
 * Secunia Analysis
 * Systems Affected
 * Approve Distribution
 * Remediation Status
 * Secunia CVSS Score
 * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=51737

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:
 * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/
http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION:
Multiple vulnerabilities have been reported in Sybase Adaptive Server
Enterprise, which can be exploited by malicious, local users to
disclose certain sensitive information and gain escalated privileges,
by malicious users to bypass certain security restrictions and
compromise a vulnerable system, and by malicious people to conduct
SQL injection attacks, manipulate certain data, and cause a DoS
(Denial of Service).

1) An error when creating proxy tables can be exploited to bypass
certain security restrictions.

2) An error when creating create tables via the ASE plugin for Sybase
Central can be exploited to bypass certain security restrictions.

3) Certain unspecified input is not properly sanitised before being
used in SQL queries. This can be exploited to manipulate SQL queries
by injecting arbitrary SQL code.

4) An unspecified error when handling installation log files can be
exploited to gain access to certain sensitive information.

5) An unspecified error can be exploited to cause a stack-based
buffer overflow and gain escalated privileges.

6) An unspecified error can be exploited to cause a DoS (Denial of
Service).

7) An unspecified error can be exploited to cause a stack-based
buffer overflow.

8) An unspecified error can be exploited to corrupt certain server
side files.

9) An unspecified error can be exploited to execute arbitrary Java
code.

The vulnerabilities are reported in versions 15.0.3 and later.

SOLUTION:
Apply the latest ESDs (please see the vendor's advisory for details).

PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1, 3 - 9) Martin Rakhmanov, Application Security Inc
2) Esteban Martinez Fayo, Application Security Inc

ORIGINAL ADVISORY:
http://www.sybase.com/detail?id=1099305

OTHER REFERENCES:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

DEEP LINKS:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

EXTENDED DESCRIPTION:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

EXTENDED SOLUTION:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

EXPLOIT:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------