CVE-2008-0912

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-02-22 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long (1) username, (2) version, or (3) remote ID. NOTE: some of these details are obtained from third party information.

Affected products

Sybase Mobilink: through 10.0.1.3629
Sybase Sql Anywhere: 10.0.1.3415

References

http://aluigi.altervista.org/adv/mobilinkhof-adv.txt
http://secunia.com/advisories/29045
http://securityreason.com/securityalert/3691
http://www.securityfocus.com/archive/1/488409/100/0/threaded
http://www.securityfocus.com/archive/1/490259/100/0/threaded
http://www.securityfocus.com/bid/27914
http://www.securitytracker.com/id?1019469
http://www.vupen.com/english/advisories/2008/0626
http://aluigi.altervista.org/adv/mobilinkhof-adv.txt
http://secunia.com/advisories/29045
http://securityreason.com/securityalert/3691
http://www.securityfocus.com/archive/1/488409/100/0/threaded

Get alerted when CVE-2008-0912 or the next vulnerability affects your stack