CVE-2011-2042 Information disclosure in n/a

What is CVE-2011-2042?

CVE-2011-2042 is a medium-severity vulnerability in n/a, published on 22 Oct 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018.

Weakness: CWE-200

Which versions are affected by CVE-2011-2042?

It affects 1 product.

Products include Cisco Ciscoworks Common Services.

How do I fix CVE-2011-2042?

No fix has been published for CVE-2011-2042 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-2042 being exploited?

There is no known exploitation of CVE-2011-2042 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2010-3036 Memory corruption in n/a Critical 10.0
• CVE-2009-1161 Path traversal in n/a Critical 10.0
• CVE-2008-2054 Code injection in n/a Critical 9.3
• CVE-2011-3310 Command injection in n/a Critical 9.0
• CVE-2011-0966 Path traversal in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-853p-pw8h-rw48.