CVE-2006-2539 json
Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does…
published 2006-05-22 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-2539
- cvss
- 3.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 23%
- public exploits
- 0
- none known
Summary
Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText function in javax.swing.JPasswordField component.
Patch / fix
- sybase.com/detail?id=1040665 patch
- securityfocus.com/bid/18036 patch
- secunia.com/advisories/20145 advisory
Exploit prediction
0.30% chance of exploitation in the next 30 days, higher than 23% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 3.5 | AV:L/AC:H/Au:S/C:P/I:P/A:P |
References
-
secunia.com
/advisories/20145
third-party-advisory, patch, vendor-advisory
-
sybase.com
/detail?id=1040665
patch
-
securityfocus.com
/bid/18036
vdb-entry, patch
-
exchange.xforce.ibmcloud.com
/vulnerabilities/26567
vdb-entry
-
vupen.com
/english/advisories/2006/1869
vdb-entry
Sources
- CVE List CVE-2006-2539
- NVD CVE-2006-2539
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.