Detections
Analytics
MobiLink Server < 10.0.1 build 3649 mlsrv10.exe Multiple Remote Overflows
critical Nessus Plugin ID 31719
Synopsis
The remote Windows host has a program that is prone to a buffer overflow attack.Description
The version of the SQL Anywhere MobiLink Server installed on the remote host reportedly is affected by a heap-based buffer overflow when handling strings such as the username, version, and remote ID longer than 128 bytes. An unauthenticated attacker may be able to leverage this issue to execute arbitrary code on the affected system.Solution
Upgrade to SQL Anywhere 10.0.1 build 3649 or later as that reportedly addresses the issues.See Also
http://aluigi.altervista.org/adv/mobilinkhof-adv.txt
https://www.securityfocus.com/archive/1/archive/1/488409/100/0/threaded
https://www.securityfocus.com/archive/1/490259/30/0/threaded
Plugin Details
Severity: Critical
ID: 31719
File Name: mobilink_10_0_1_3649.nasl
Version: 1.18
Type: local
Family: Databases
Published: 4/1/2008
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:sybase:mobilink, cpe:/a:sybase:sql_anywhere
Required KB Items: SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Reference Information
CVE: CVE-2008-0912
BID: 27914