The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.
Conclusion & alert: CVE-2005-0942 is rated Moderate Risk (48.1/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 2.03%). Mandatory action: Review affected assets and schedule remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 1.42% | 2.03% | +0.61% |
| 2 | 2025-03-23 | 1.25% | 1.42% | +0.17% |
| 3 | 2025-03-19 | — | 1.25% | — |
Full EPSS history (9 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 5.0 | 2.0 | MEDIUM |
|
10.0 | 2.9 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| sybase | adaptive_server_enterprise | 11.03.3 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5.3 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html | Patch |
| http://marc.info/?l=bugtraq&m=111272918117194&w=2 | |
| http://secunia.com/advisories/13632 | Patch Vendor Advisory |
| http://www.ngssoftware.com/advisories/sybase-ase.txt | Patch Vendor Advisory |
| http://www.securityfocus.com/archive/1/393851 | Vendor Advisory |
| http://www.securityfocus.com/bid/12080 | Patch |
| http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html | |
| http://www.sybase.com/detail?id=1034520 | Patch Vendor Advisory |
| http://www.sybase.com/detail?id=1034752 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/19354 |