Multiple MySQL MaxDB database server WebTools problems

Buffer overflows, NULL pointer dereference, DoS...

CVE-2004-1168

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header...

CVE-2004-1169

MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service application crash via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference...

CVE-2004-1168

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header...

CVE-2004-1169

MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service application crash via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference...

CVE-2004-1168

CVE-2004-1168 affects MaxDB WebTools before/including 7.5.00.18. The WebDav handler is vulnerable to a stack-based buffer overflow, enabling remote code execution when a long Overwrite header is processed. No exploit specifics or mitigation details are provided in the supplied documents. This ent...

CVE-2004-1169

MaxDB WebTools 7.5.00.18 and earlier are affected. A remote attacker can trigger a denial of service (application crash) by issuing an HTTP GET for a non-existent file followed by two carriage returns, causing a NULL dereference. No remediation details are provided in the connected documents. If ...

CVE-2004-1168: Undefined Security Weakness

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header...

CVE-2004-1169: Undefined Security Weakness

MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service application crash via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference...

MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service

Name: MaxDB WebTools = 7.5.00.18 buffer overflow and Denial of Service Date: 7 Dec 2004 Platforms: Any Author: Evgeny Demidov Description: "MaxDB is a heavy-duty, SAP-certified open source database for OLTP and OLAP usage which offers high reliability, availability, scalability and a very...