CVE-2005-0441
CVE-2005-0441 is a critical-severity vulnerability in Sybase Adaptive Server Enterprise with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 9% (94th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sybase Adaptive Server Enterprise
- Published:
- Last modified:
Description
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.
Frequently asked questions
- What is CVE-2005-0441?
- Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.
- How severe is CVE-2005-0441?
- CVE-2005-0441 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2005-0441 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (94th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-0441?
- CVE-2005-0441 primarily affects Sybase Adaptive Server Enterprise. In total, 29 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-0441?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2005-0441 published?
- CVE-2005-0441 was published on 2004-12-22 and last updated on 2026-06-16.
References
- http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html
- http://marc.info/?l=bugtraq&m=111272918117194&w=2
- http://secunia.com/advisories/13632
- http://www.ngssoftware.com/advisories/sybase-ase.txt
- http://www.securityfocus.com/archive/1/393851
- http://www.securityfocus.com/bid/12080
- http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html
- http://www.sybase.com/detail?id=1034520
- http://www.sybase.com/detail?id=1034752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19354
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19974
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19978
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19979
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19980
Affected products (29)
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*
More vulnerabilities in Sybase Adaptive Server Enterprise
- CVE-2013-6245 — Critical (CVSS 10.0): Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5…
- CVE-2016-7402 — Critical (CVSS 9.8): SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges…
- CVE-2013-6866 — Critical (CVSS 9.0): SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50…
- CVE-2013-6865 — Critical (CVSS 9.0): SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before…
- CVE-2013-6863 — Critical (CVSS 9.0): SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before…
- CVE-2013-6859 — High (CVSS 8.5): SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50…