CVE-2005-0441

Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.

• http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=111272918117194&w=2
• http://secunia.com/advisories/13632Patch, Vendor Advisory
• http://www.ngssoftware.com/advisories/sybase-ase.txtVendor Advisory
• http://www.securityfocus.com/archive/1/393851Patch, Vendor Advisory
• http://www.securityfocus.com/bid/12080Patch, Vendor Advisory
• http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html
• http://www.sybase.com/detail?id=1034520Patch, Vendor Advisory
• http://www.sybase.com/detail?id=1034752Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19354
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19974
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19976
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19978
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19979
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19980
• http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=111272918117194&w=2
• http://secunia.com/advisories/13632Patch, Vendor Advisory
• http://www.ngssoftware.com/advisories/sybase-ase.txtVendor Advisory
• http://www.securityfocus.com/archive/1/393851Patch, Vendor Advisory
• http://www.securityfocus.com/bid/12080Patch, Vendor Advisory
• http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html
• http://www.sybase.com/detail?id=1034520Patch, Vendor Advisory
• http://www.sybase.com/detail?id=1034752Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19354
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19974
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19976
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19978
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19979
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19980

Published

Dec 22, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0435awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to…
• CVE-2005-0436Direct code injection vulnerability in awstats.pl in AWStats…
• CVE-2005-0437Directory traversal vulnerability in awstats.pl in AWStats 6…
• CVE-2005-0438awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to…
• CVE-2005-0439Buffer overflow in the decode_post function in ELOG before 2…
• CVE-2005-0440ELOG before 2.5.7 allows remote attackers to bypass authenti…
• CVE-2005-0442Directory traversal vulnerability in index.php for CubeCart …
• CVE-2005-0443index.php in CubeCart 2.0.4 allows remote attackers to (1) o…
• CVE-2005-0444VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared l…
• CVE-2005-0445Cross-site scripting (XSS) vulnerability in Open WebMail 2.x…
• CVE-2005-0446Squid 2.5.STABLE8 and earlier allows remote attackers to cau…
• CVE-2005-0447Solaris 7, 8, and 9 allows remote attackers to cause a denia…