Check Point Advisories

Sybase Multiple Products Directory Traversal (CVE-2011-2474)

Check Point Reference:	CPAI-2013-3630
Date Published:	22 Dec 2013
Severity:	High
Last Updated:	Tuesday 01 January, 2013
Source:	CVE-2011-2474
Protection Provided by:
Who is Vulnerable?	Sybase EAserver 6.3.1 Developers Edition Sybase Appeon 6.x Sybase EAServer 6.x Sybase Replication Server 15.x Messaging Edition Sybase WorkSpace 2.x
Vulnerability Description	A directory traversal vulnerability has been reported in multiple Sybase products.
Vulnerability Details	The vulnerability is due to unpermitted input validation in files systems. A remote attacker could exploit this vulnerability by sending a malicious HTTP request to the victim. Successful exploitation of this vulnerability could allow a remote attacker to gain access to arbitrary files.