The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.
総合評価: CVE-2005-0942 は中リスク(48.1/100)。CVSS 深刻度は中。悪用される可能性が高い(EPSS 2.03%、78 パーセンタイル) 推奨対応: 影響資産を整理し、修補計画に組み込んでください。
リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。
EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置(高いほど相対的に深刻)を示します。
| # | 日付 | 旧 EPSS スコア | 新 EPSS スコア | Δ(新 − 旧) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 1.42% | 2.03% | +0.61% |
| 2 | 2025-03-23 | 1.25% | 1.42% | +0.17% |
| 3 | 2025-03-19 | — | 1.25% | — |
EPSS の全履歴 (全 9 件)
この CVE の CVSS 指標。
| ベーススコア | バージョン | 深刻度 | ベクトル | 悪用しやすさ | 影響 | スコアの出典 |
|---|---|---|---|---|---|---|
| 5.0 | 2.0 | MEDIUM |
|
10.0 | 2.9 | [email protected] |
| ベンダー | 製品 | バージョン | 生の CPE |
|---|---|---|---|
| sybase | adaptive_server_enterprise | 11.03.3 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.5.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 11.9.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.0.1 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5.2 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:* |
| sybase | adaptive_server_enterprise | 12.5.3 | cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:* |
| URL | タグ |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html | Patch |
| http://marc.info/?l=bugtraq&m=111272918117194&w=2 | |
| http://secunia.com/advisories/13632 | Patch Vendor Advisory |
| http://www.ngssoftware.com/advisories/sybase-ase.txt | Patch Vendor Advisory |
| http://www.securityfocus.com/archive/1/393851 | Vendor Advisory |
| http://www.securityfocus.com/bid/12080 | Patch |
| http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html | |
| http://www.sybase.com/detail?id=1034520 | Patch Vendor Advisory |
| http://www.sybase.com/detail?id=1034752 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/19354 |