CVE-2011-0497 (GCVE-0-2011-0497)
Vulnerability from cvelistv5 – Published: 2011-01-20 18:00 – Updated: 2024-08-06 21:58
VLAI
EPSS
VEX
Summary
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/42904 | third-party-advisoryx_refsource_SECUNIA |
| http://www.sybase.com/detail?id=1091057 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/45809 | vdb-entryx_refsource_BID |
| http://osvdb.org/70427 | vdb-entryx_refsource_OSVDB |
| http://labs.idefense.com/intelligence/vulnerabili… | third-party-advisoryx_refsource_IDEFENSE |
| http://www.vupen.com/english/advisories/2011/0125 | vdb-entryx_refsource_VUPEN |
Date Public
2011-01-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T21:58:24.552Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "easerver-unspec-file-include(64695)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/42904"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE",
"x_transferred"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "easerver-unspec-file-include(64695)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/42904"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"tags": [
"third-party-advisory",
"x_refsource_IDEFENSE"
],
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-0497",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "easerver-unspec-file-include(64695)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"name": "42904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/42904"
},
{
"name": "http://www.sybase.com/detail?id=1091057",
"refsource": "CONFIRM",
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"name": "45809",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"name": "70427",
"refsource": "OSVDB",
"url": "http://osvdb.org/70427"
},
{
"name": "20110110 Sybase EAServer Remote Directory Traversal Vulnerability",
"refsource": "IDEFENSE",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"name": "ADV-2011-0125",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2011/0125"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-0497",
"datePublished": "2011-01-20T18:00:00.000Z",
"dateReserved": "2011-01-20T00:00:00.000Z",
"dateUpdated": "2024-08-06T21:58:24.552Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2011-0497",
"date": "2026-09-26",
"epss": "0.02218",
"percentile": "0.81954"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "4D62642B-745C-4128-806B-ECE8D2012F30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D7952FFD-2A2C-413C-B5AF-011D768E3D9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "F34DD97E-424A-4F4C-8A35-3D836B07572B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:2.8:*:*:*:*:*:*:*",
"matchCriteriaId": "EDB02E39-393E-42B7-9815-40CCDC00BD5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CC45E1C7-53A6-4010-92F3-D58CAE635115",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4661B9C5-8B48-4E23-8873-67A2DD24E9BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BB486446-9589-48A5-B43D-7A04CC092399",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:appeon_for_powerbuilder:6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E66D15BF-A87E-4049-AF24-1BD8503BE9D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "31C604B5-7CAB-4D38-981A-E8543B717FE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9F57E9C2-7D2B-42CF-9224-50E7E82473A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "53125F6B-62E4-4E03-B8B5-602949EB394F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BF9C6A53-8D65-4B4D-88A4-2F43D0823B7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0F4C802B-73A3-4FB2-9A9D-83964684E812",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A7920CE9-8B9D-46BB-AEBC-7C129CB3C8BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FFB72B90-1DD3-4BA8-9527-68C6F421890A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EEC9CE22-7E0B-44C4-9751-B991869B5C62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F3483B91-54D6-4D5F-9ED2-9FCAC797366D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0179A93F-EE13-4BCC-BBA8-E4077129F14B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BDBC1329-7165-48E5-A3DA-CB71DD421DD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D2309396-F172-4E05-BF7A-8FED42F53CBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:easerver:6.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "033090D0-F295-406C-A14F-DE06EF0F04C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:replication_server:*:*:messaging:*:*:*:*:*",
"matchCriteriaId": "361B2EF0-F2DF-44B1-A3EA-11C2D67659D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:replication_server:15.2:*:messaging:*:*:*:*:*",
"matchCriteriaId": "2866AAA5-84AD-4955-BE91-3D59DA3CADC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DF399757-2A1D-4953-B5CD-84BC652BC9D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6009B1EF-4D54-49D7-840D-201AE30DB362",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "9C638C06-3821-41C8-AA58-436E34DA260A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "35DD1E08-B6BD-4BBC-B852-34FFBFB13AE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "D06E6BCB-5115-4215-8CDE-CF8F1B12BC81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F6443AD8-5857-407D-82E2-472F70B45D30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17074B83-40EF-4C5C-A070-DA343EC98B57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2210F86E-C5E4-4869-9C79-F6E39B99AB96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EB094768-562C-472C-B1C1-F4FAF2E31B17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F31E2FB2-60DE-4480-850A-E0FB02C88193",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sybase:sybase_workspace:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C3798814-4599-4372-AA9F-C75919DA946A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via \"../\\\" (dot dot forward-slash backslash) sequences in a crafted request."
},
{
"lang": "es",
"value": "Una vulnerabilidad de salto de directorio en EAServer de Sybase versiones 6.x anteriores a 6.3 ESD-2, tal y como es usado en Appeon, Replication Server Messaging Edition (RSME) y WorkSpace, permite a los atacantes remotos leer archivos arbitrarios por medio de \"../\\\" (punto punto seguido de barra diagonal y barra invertida) en una petici\u00f3n especialmente dise\u00f1ada."
}
],
"id": "CVE-2011-0497",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-01-20T19:00:09.803",
"references": [
{
"source": "cve@mitre.org",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/70427"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42904"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/70427"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/42904"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/45809"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.sybase.com/detail?id=1091057"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2011/0125"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64695"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-22"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…