CVE-2011-2475
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail...
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.
- Record
CVE-2011-2475- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.
- Record
CVE-2011-2475- Updated
- 2026-11-02
EUVDEUVD-2011-2464 No score
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.
- Record
EUVD-2011-2464- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jfv6-c5mj-2xvj No score
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail...
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields, related to authentication logging.
- Record
GHSA-jfv6-c5mj-2xvj- Weakness
- CWE-134
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2475 is a high vulnerability (CVSS 10.0) in Sybase Onebridge Mobile Data Suite, published June 9, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.68%, the 89th percentile. No source names a fixed version.