198 matches found
SAP DB / MaxDB Cons Program Arbitrary Command Execution
The version of SAP DB / MaxDB installed on the remote host fails to sanitize user-supplied input to the 'show' and 'execsdbinfo' commands before passing it to a 'system' call. An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands on the affected host subject to...
SAP DB / MaxDB Cons Program Arbitrary Command Execution
Binary data 4337.prm...
SAP MaxDB <= 7.6.03.07 pre-auth Remote Command Execution Exploit
No description provided by source. Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemm...
MaxDB Version Detection
Binary data 4336.prm...
SAP MaxDB shell characters security vulnerability
Shell characters vulnerability on executing pre-authentication execsdbinfo command...
Pre-auth remote commands execution in SAP MaxDB 7.6.03.07
Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
SAP MaxDB <= 7.6.03.07 pre-auth Remote Command Execution Exploit
Exploit for multiple platform in category remote exploits ================================================================ SAP MaxDB = 7.6.03.07 pre-auth Remote Command Execution Exploit ================================================================ Luigi Auriemma Application: SAP MaxDB...
SAP MaxDB 7.6.03.07 - Remote Command Execution
SAP MaxDB 7.6.03.07 - Remote Command Execution Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author:...
SAP MaxDB 7.6.03.07 - Remote Command Execution
Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
SAP MaxDB未明远程执行漏洞
BUGTRAQ ID: 26822 CNCAN ID:CNCAN-2007121207 MaxDB是SAP授权给MySQL的基于SAP DB的数据库。 SAP MaxDB存在未明安全问题，本地攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 SAP MaxDB 7.6.00.37 SAP MaxDB 7.4.3.32 目前没有解决方案提供： https://www.sdn.sap.com/irj/sdn/maxdb...
SAP DB / MaxDB Web Server DBM_INTERN_TEST Event Buffer Overflow
The remote host is running SAP DB or MaxDB, a SAP-certified open- source database supporting OLTP and OLAP. According to its version, the Web DBM component of SAP DB or MaxDB on the remote host reportedly contains a stack-based buffer overflow triggered when displaying user-supplied arguments as...
Debian DSA-1190-1 : maxdb-7.5.00 - buffer overflow
Oliver Karow discovered that the WebDBM frontend of the MaxDB database performs insufficient sanitising of requests passed to it, which might lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 1190-1] New maxdb-7.5.00 packages fix execution of arbitrary code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1XXX-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 4th, 2006 http://www.debian.org/security/faq -...
DSA-1190-1 maxdb-7.5.00
Bulletin has no description...
MaxDB WebDBM Database Parameter Overflow
This module exploits a stack buffer overflow in the MaxDB WebDBM service. By sending a specially-crafted HTTP request that contains an overly long database name. A remote attacker could overflow a buffer and execute arbitrary code on the system with privileges of the wahttp process. This module h...
MySQL MaxDB WebDBM database name buffer overflow
Added: 09/06/2006 CVE: CVE-2006-4305 BID: 19660 OSVDB: 28300 Background MaxDB is a SAP-certified open-source database developed by MySQL. Problem A buffer overflow in MaxDB allows remote attackers to execute arbitrary commands by sending a long database name from a WebDBM client. Resolution Upgra...
MySQL MaxDB WebDBM database name buffer overflow
Added: 09/06/2006 CVE: CVE-2006-4305 BID: 19660 OSVDB: 28300 Background MaxDB is a SAP-certified open-source database developed by MySQL. Problem A buffer overflow in MaxDB allows remote attackers to execute arbitrary commands by sending a long database name from a WebDBM client. Resolution Upgra...
SAP DB / MaxDB WebDBM Client Database Name Remote Overflow
The remote host is running SAP DB or MaxDB, a SAP-certified open- source database supporting OLTP and OLAP. According to its version, the Web DBM component of MaxDB on the remote host reportedly contains a buffer overflow that can be triggered by an HTTP request containing a long database name. A...
MySQL MaxDB WebDBM database name buffer overflow
Added: 09/06/2006 CVE: CVE-2006-4305 BID: 19660 OSVDB: 28300 Background MaxDB is a SAP-certified open-source database developed by MySQL. Problem A buffer overflow in MaxDB allows remote attackers to execute arbitrary commands by sending a long database name from a WebDBM client. Resolution Upgra...
MySQL MaxDB WebDBM database name buffer overflow
Added: 09/06/2006 CVE: CVE-2006-4305 BID: 19660 OSVDB: 28300 Background MaxDB is a SAP-certified open-source database developed by MySQL. Problem A buffer overflow in MaxDB allows remote attackers to execute arbitrary commands by sending a long database name from a WebDBM client. Resolution Upgra...