Sybase ASE Multiple Vulnerabilities: RCE, Privilege Escalation, DoS, Info Disclosure

Below are the key vulnerability details from the webpage screenshot: Product and Affected Scope - Product: Sybase Adaptive Server Enterprise (ASE) - Vendor: Sybase - Affected versions range from 15.0 to 15.7, including multiple sub-versions Nine Co-Existing Vulnerabilities with Detailed Descriptions 1. Denial of Service via hacpmmsgxchg Built-in Procedure Any valid database user can trigger a denial of service by calling the hacpmmsgxchg built-in procedure with incorrect parameters, causing the service process to crash. Affected versions: Sybase ASE 15.7 2. Denial of Service via ssl admin Built-in Function Any valid database user can cause a denial of service by passing excessively long parameters to the ssl admin function. Affected versions: Sybase ASE 15.0, Sybase ASE 15.5, Sybase ASE 15.7 3. File Creation via Trigger Table Command Any valid database user can create arbitrary files within the database system files. Affected versions: Sybase ASE 15.0.3 and later versions 4. Buffer Overflow in set password Built-in Function Any valid database user can trigger a stack buffer overflow during execution of the set password built-in function by passing overly long parameters, allowing an attacker to execute arbitrary code in the process context. Affected versions: Sybase ASE 15.0.3 and later versions 5. Privilege Escalation via UPDATE STATISTICS SQL Injection Any valid database user can escalate privileges by crafting a malicious UPDATE STATISTICS command, leading to SQL injection. Affected versions: Sybase ASE 15.0.3 and later versions 6. Privilege Escalation via hacpmmsgxchg Fixed Process Any valid database user can grant maximum privileges to themselves or others by invoking the hacpmmsgxchg fixed process. Affected versions: Sybase ASE 15.0, Sybase ASE 15.5, Sybase ASE 15.7 7. Data Leakage Due to Plain-Text Password Storage in Installation Log on Windows Installation logs record the plain-text password for the built-in 'sa' account during installation or upgrade, making it easily accessible to attackers on Windows platforms. Affected versions: Sybase ASE 15.0.3 and later versions 8. Buffer Overflow in config_admin Built-in Function Due to Input Validation Failure The config_admin built-in function also contains a vulnerability that may lead to stack overflow, enabling execution of arbitrary code. Affected versions: Sybase ASE 15.0, Sybase ASE 15.5, Sybase ASE 15.7 9. Unauthenticated Offline Database Backup Vulnerability Versions of Sybase ASE 15.7 prior to SP51 contain a vulnerability that allows unauthenticated users to perform offline database backups. Affected versions: Sybase ASE 15.7 Patch Measures - No immediate fix is available; contact has been established with the vendor, and patches have been released.

Goal Reached Thanks to every supporter — we hit 100%!

Sybase ASE Multiple Vulnerabilities: RCE, Privilege Escalation, DoS, Info Disclosure