CVE-2008-0912

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 16%

from disclosure to weapon0 days

Published on NVDFeb 22

1st PoCFeb 20

exploitation probability

16%top 3% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long (1) username, (2) version, or (3) remote ID. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/31271

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://aluigi.altervista.org/adv/mobilinkhof-adv.txt http://secunia.com/advisories/29045 http://securityreason.com/securityalert/3691 http://www.securityfocus.com/archive/1/488409/100/0/threaded http://www.securityfocus.com/archive/1/490259/100/0/threaded http://www.securityfocus.com/bid/27914 http://www.securitytracker.com/id?1019469 http://www.vupen.com/english/advisories/2008/0626