CVE-2006-2539

LOW 3.5CVE-2006-2539 · Published 22/05/2006 · updated 16/06/2026

In short

CVE-2006-2539 is a LOW (CVSS 3.5) vulnerability affecting easerver (sybase).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 23.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
easerver sybase	`= 5.0= 5.2= 5.3`	No fix yet

Description

Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText function in javax.swing.JPasswordField component.

References

secunia.com/advisories/20145 · Patch
securityfocus.com/bid/18036 · Patch
sybase.com/detail · Patch
vupen.com/english/advisories/2006/1869
exchange.xforce.ibmcloud.com/vulnerabilities/26567

More vulnerabilities in easerver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

easerver

sybase

= 5.0= 5.2= 5.3

No fix yet

Description

More vulnerabilities in easerver

See all →