Vulnerability Details : CVE-2011-0496
Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability."
Vulnerability category: Execute code
Products affected by CVE-2011-0496
- cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:6.3:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:6.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:2.8:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:2.6:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:appeon_for_powerbuilder:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:replication_server:*:*:messaging:*:*:*:*:*
- cpe:2.3:a:sybase:replication_server:15.2:*:messaging:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:*:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:sybase_workspace:2.0.2:*:*:*:*:*:*:*
Threat overview for CVE-2011-0496
Top countries where our scanners detected CVE-2011-0496
Top open port discovered on systems with this issue
80
IPs affected by CVE-2011-0496 113
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2011-0496!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2011-0496
10.70%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-0496
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2011-0496
-
http://www.securityfocus.com/bid/45809
Sybase EAServer Multiple Vulnerabilities
-
http://www.sybase.com/detail?id=1091057
SAP Software Solutions | Business Applications and TechnologyVendor Advisory
-
http://www.vupen.com/english/advisories/2011/0125
Webmail | OVH- OVHVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/64697
Sybase EAServer Web services code execution CVE-2011-0496 Vulnerability Report
Jump to