Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.sybase.com/detail?id=1092074 | Vendor Advisory | 
| http://zerodayinitiative.com/advisories/ZDI-11-171/ | |
| http://www.sybase.com/detail?id=1092074 | Vendor Advisory | 
| http://zerodayinitiative.com/advisories/ZDI-11-171/ | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 01:28
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://www.sybase.com/detail?id=1092074 - Vendor Advisory | |
| References | () http://zerodayinitiative.com/advisories/ZDI-11-171/ - | 
Information
                Published : 2011-06-09 21:55
Updated : 2025-04-11 00:51
NVD link : CVE-2011-2475
Mitre link : CVE-2011-2475
CVE.ORG link : CVE-2011-2475
JSON object : View
Products Affected
                sybase
- onebridge_mobile_data_suite
CWE
                
                    
                        
                        CWE-134
                        
            Use of Externally-Controlled Format String
