CVE-2005-0942

CVE-2005-0942 is a medium-severity vulnerability in Sybase Adaptive Server Enterprise with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 5.0)
• EPSS exploit prediction: 2% (79th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Sybase Adaptive Server Enterprise
• Published: 2005-05-02
• Last modified: 2026-06-16

Description

The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.

Frequently asked questions

What is CVE-2005-0942?

The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.

How severe is CVE-2005-0942?

CVE-2005-0942 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2005-0942 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (79th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-0942?

CVE-2005-0942 primarily affects Sybase Adaptive Server Enterprise. In total, 29 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2005-0942?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-0942 published?

CVE-2005-0942 was published on 2005-05-02 and last updated on 2026-06-16.

References

• http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html
• http://marc.info/?l=bugtraq&m=111272918117194&w=2
• http://secunia.com/advisories/13632
• http://www.ngssoftware.com/advisories/sybase-ase.txt
• http://www.securityfocus.com/archive/1/393851
• http://www.securityfocus.com/bid/12080
• http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html
• http://www.sybase.com/detail?id=1034520
• http://www.sybase.com/detail?id=1034752
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19354

Affected products (29)

• cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*
• cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*

More vulnerabilities in Sybase Adaptive Server Enterprise

• CVE-2013-6245 — Critical (CVSS 10.0): Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5…
• CVE-2005-0441 — Critical (CVSS 10.0): Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote…
• CVE-2016-7402 — Critical (CVSS 9.8): SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges…
• CVE-2013-6866 — Critical (CVSS 9.0): SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50…
• CVE-2013-6865 — Critical (CVSS 9.0): SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before…
• CVE-2013-6863 — Critical (CVSS 9.0): SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before…

All CVEs affecting Sybase Adaptive Server Enterprise →