CVE-2006-1829

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-19 · updated 2026-06-16

Description

EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles.

Affected products

Sybase Easerver: 5.2, 5.3

References

http://secunia.com/advisories/19605
http://securitytracker.com/id?1015913
http://www.securityfocus.com/bid/17508
http://www.sybase.com/detail?id=1040117
http://www.vupen.com/english/advisories/2006/1344
https://exchange.xforce.ibmcloud.com/vulnerabilities/25777
http://secunia.com/advisories/19605
http://securitytracker.com/id?1015913
http://www.securityfocus.com/bid/17508
http://www.sybase.com/detail?id=1040117
http://www.vupen.com/english/advisories/2006/1344
https://exchange.xforce.ibmcloud.com/vulnerabilities/25777

Get alerted when CVE-2006-1829 or the next vulnerability affects your stack