Lucene search

[email protected]CVE-2004-0931

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-0931

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0931

mysql

maxdb

denial of service

http request

vulnerability

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.4%

JSON

MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.

CPENameOperatorVersion
mysql:maxdbmysql maxdbeq7.5.00.15
mysql:maxdbmysql maxdbeq7.5.00.12
mysql:maxdbmysql maxdbeq7.5.00.16
mysql:maxdbmysql maxdbeq7.5.00.14
mysql:maxdbmysql maxdbeq7.5.00.11
mysql:maxdbmysql maxdbeq7.5.00.08

CPE	Name	Operator	Version
mysql:maxdb	mysql maxdb	eq	7.5.00.15
mysql:maxdb	mysql maxdb	eq	7.5.00.12
mysql:maxdb	mysql maxdb	eq	7.5.00.16
mysql:maxdb	mysql maxdb	eq	7.5.00.14
mysql:maxdb	mysql maxdb	eq	7.5.00.11
mysql:maxdb	mysql maxdb	eq	7.5.00.08

References

www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false

www.osvdb.org/10532

www.secunia.com/advisories/12756

www.securityfocus.com/bid/11346

exchange.xforce.ibmcloud.com/vulnerabilities/17633

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.4%

JSON

Related for CVE-2004-0931

securityvulns1