CVE-2006-4305

🗓️ 30 Aug 2006 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 57 Views🌐 WEB

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2006-4305	20 Sep 201000:00	–	circl
Check Point Advisories	MySQL MaxDB WebDBM Server Buffer Overflow (CVE-2006-4305)	10 Nov 200900:00	–	checkpoint_advisories
Cvelist	CVE-2006-4305	30 Aug 200601:00	–	cvelist
Debian	[SECURITY] [DSA 1190-1] New maxdb-7.5.00 packages fix execution of arbitrary code	4 Oct 200619:41	–	debian
Tenable Nessus	Debian DSA-1190-1 : maxdb-7.5.00 - buffer overflow	25 Oct 200600:00	–	nessus
Tenable Nessus	SAP DB / MaxDB WebDBM Client Database Name Remote Overflow	6 Sep 200600:00	–	nessus
Exploit DB	MaxDB WebDBM - 'Database' Remote Overflow (Metasploit)	20 Sep 201000:00	–	exploitdb
Metasploit	MaxDB WebDBM Database Parameter Overflow	27 Sep 200603:23	–	metasploit
NVD	CVE-2006-4305	30 Aug 200601:04	–	nvd
OpenVAS	Debian: Security Advisory (DSA-1190-1)	17 Jan 200800:00	–	openvas

NVD

Node

mysql maxdbRange≤7.6.00.22

Source	Link
dev	www.dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html
vupen	www.vupen.com/english/advisories/2006/3410
symantec	www.symantec.com/enterprise/research/SYMSA-2006-009.txt
securityfocus	www.securityfocus.com/bid/19660
secunia	www.secunia.com/advisories/22518
debian	www.debian.org/security/2006/dsa-1190
securityfocus	www.securityfocus.com/archive/1/444601/100/0/threaded
secunia	www.secunia.com/advisories/21677
securitytracker	www.securitytracker.com/id
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/28636

Parameter	Position	Path	Description	CWE
Database	path	/webdbm	Buffer/stack overflow via overly long Database parameter in WebDBM endpoint.

16 Apr 2026 00:27Current

7.5High risk

Vulners AI Score7.5

CVSS 210

EPSS0.80456