CVE-2005-0441: Sybase Adaptive Server Enterprise

High severity, CVSS 10.0. EPSS: 8.5% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.

Affected products

• Sybase Adaptive Server Enterprise: version 11.03.3 only; version 11.5 only; version 11.5.1 only; version 11.9.2 only; version 12.0 only; version 12.0.1 only; …

Published 2004-12-22. Last modified 2026-06-16.