CVE-2011-0497

Published: Jan 20, 2011Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.

Affected (34)

Products: Sybase: Appeon For Powerbuilder, Easerver, Replication Server, Sybase Workspace

Sybase

4 products

Appeon For Powerbuilder

Easerver

Replication Server

Sybase Workspace

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Sybase Appeon For Powerbuilder	Version 2.5
Sybase Appeon For Powerbuilder	Version 2.6
Sybase Appeon For Powerbuilder	Version 2.7
Sybase Appeon For Powerbuilder	Version 2.8
Sybase Appeon For Powerbuilder	Version 6.0
Sybase Appeon For Powerbuilder	Version 6.1
Sybase Appeon For Powerbuilder	Version 6.2
Sybase Appeon For Powerbuilder	Version 6.5
Sybase Easerver	Version 5.0.1
Sybase Easerver	Version 5.0
Sybase Easerver	Version 5.1
Sybase Easerver	Version 5.2.1
Sybase Easerver	Version 5.2
Sybase Easerver	Version 5.3
Sybase Easerver	Version 5.5
Sybase Easerver	Version 6.0.2
Sybase Easerver	Version 6.0
Sybase Easerver	Version 6.1
Sybase Easerver	Version 6.2
Sybase Easerver	Version 6.3.1
Sybase Easerver	Version 6.3
Sybase Replication Server	All versions
Sybase Replication Server	Version 15.2
Sybase Sybase Workspace	All versions
Sybase Sybase Workspace	Version 1.0
Sybase Sybase Workspace	Version 1.5
Sybase Sybase Workspace	Version 1.6
Sybase Sybase Workspace	Version 1.7
Sybase Sybase Workspace	Version 2.0.1
Sybase Sybase Workspace	Version 2.0.2
Sybase Sybase Workspace	Version 2.0
Sybase Sybase Workspace	Version 2.1.2
Sybase Sybase Workspace	Version 2.1
Sybase Sybase Workspace	Version 2.5