SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka CR732989.
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Link | Tags |
---|---|
http://www.sybase.com/detail?id=1099371 | |
http://scn.sap.com/docs/DOC-8218 | |
https://service.sap.com/sap/support/notes/1893558 | |
http://secunia.com/advisories/55537 | third party advisory vendor advisory |