CVE-2006-1829 Information

Description

EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users possibly guests to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches (2) open password prompts and (3) stored custom connection profiles.

Reference

http://secunia.com/advisories/19605 http://securitytracker.com/id?1015913 http://www.securityfocus.com/bid/17508 http://www.sybase.com/detail?id=1040117 http://www.vupen.com/english/advisories/2006/1344 https://exchange.xforce.ibmcloud.com/vulnerabilities/25777