Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.
Conclusion & alert: CVE-2005-0441 is rated High Risk (68/100): CVSS Critical severity, with high exploitation likelihood (EPSS 8.55%, 94th percentile). Core evidence: EPSS ranks this CVE among the most likely to be exploited in the near term. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 21.28% | 8.55% | -12.73% |
| 2 | 2025-03-30 | 19.20% | 21.28% | +2.09% |
| 3 | 2025-03-29 | — | 19.20% | — |
Full EPSS history (11 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 10.0 | 2.0 | HIGH |
|
10.0 | 10.0 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| sybase | adaptive_server_enterprise | 11.03.3 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5.3 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:* |