CVE-2005-2297

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=112146180532313&w=2
http://secunia.com/advisories/16108
http://securitytracker.com/id?1014497
http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htmPatch, Vendor Advisory
http://www.sybase.com/detail?id=1036742Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=112146180532313&w=2
http://secunia.com/advisories/16108
http://securitytracker.com/id?1014497
http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htmPatch, Vendor Advisory
http://www.sybase.com/detail?id=1036742Patch, Vendor Advisory

Timeline

Published: Jul 19, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-22985.0BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begi CVE-2005-22994.3Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary we CVE-2005-23002.1Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file.CVE-2005-23015.0PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a d CVE-2005-23022.1PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that CVE-2005-23045.0Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC CVE-2005-23057.5DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrar CVE-2005-23063.7Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication to CVE-2005-23075.0netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service cra CVE-2005-23087.5The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly CVE-2005-23095.0Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstrated using random.jpg CVE-2005-23109.3Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an M