Unrated severityNVD Advisory· Published Jul 19, 2005· Updated Jun 16, 2026

CVE-2005-2297

Description

Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sybase/Easerver5 versions
cpe:2.3:a:sybase:easerver:4.2.5:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:sybase:easerver:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*
- (no CPE)range: 4.2.5 - 5.2

Patches

Vulnerability mechanics

References

www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htmnvdPatchVendor Advisory
www.sybase.com/detailnvdPatchVendor Advisory
marc.infonvd
secunia.com/advisories/16108nvd
securitytracker.com/idnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.059
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000