CVE-2005-1274

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter...

CVE-2005-1274

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter...

CVE-2005-1274

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter...

CVE-2005-0684

CVE-2005-0684 affects the MySQL MaxDB Webtool/WebTools in MaxDB before version 7.5.00.26. The vulnerability is a stack buffer overflow caused by improper handling of long HTTP GET requests containing a percent sign or long Lock-Token strings in WebDAV handling (WDVHandler_CommonUtils.c), allowing...

CVE-2005-0684

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long file parameter after a percent "%" sign or 2 a long Lock-Token string to the WebDAV functionality, which is not properly handled by th...

CVE-2005-1274

CVE-2005-1274 affects MySQL MaxDB prior to 7.5.00.26. A stack-based buffer overflow occurs in the WebDAV getIfHeader function, exploitable through an HTTP unlock request with a long If parameter. This can allow remote attackers to execute arbitrary code. The vulnerability is documented across mul...

CVE-2005-0684

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long file parameter after a percent "%" sign or 2 a long Lock-Token string to the WebDAV functionality, which is not properly handled by th...

CVE-2005-0684

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long file parameter after a percent "%" sign or 2 a long Lock-Token string to the WebDAV functionality, which is not properly handled by th...

CVE-2005-0081

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via an HTTP request with invalid headers...

CVE-2005-0081

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via an HTTP request with invalid headers...

CVE-2005-0082

The sapdbwaGetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash...

CVE-2005-0083

MySQL MaxDB/Web Agent vulnerability CVE-2005-0083 affects MaxDB 7.5.00 for Windows (and possibly earlier/other platforms). Remote input validation errors in DBMCli_String::ReallocString, DBMCli_String::operator, DBMCli_Buffer::ForceResize, DBMCli_Wizard::InstallDatabase, DBMCli_Devspaces::Complet...

CVE-2005-0083

MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service application crash via invalid parameters to the 1 DBMCliString::ReallocString, 2 DBMCliString::operator, 3 DBMCliBuffer::ForceResize, 4...

iDEFENSE Security Advisory 03.14.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities

MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities iDEFENSE Security Advisory 03.14.05 www.idefense.com/application/poi/display?id=218&type=vulnerabilities March 14, 2005 I. BACKGROUND MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's open source database. MaxD...

CVE-2005-0081

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via an HTTP request with invalid headers...

CVE-2005-0082

The CVE-2005-0082 issue affects MySQL MaxDB 7.5.0.0 and earlier releases up to 7.5.0.20/21, where the sapdbwa_GetUserData function can be abused by remote attackers to crash the SAP DB Web Agent via a null dereference in the WebDAV handler. Red Hat confirms the fixed version is 7.5.0.21, with upd...

CVE-2005-0082

The sapdbwaGetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash...

CVE-2005-0081

MaxDB Web Agent in MySQL MaxDB (version 7.5.0.0 and older builds prior to 7.5.0.21) is affected by two remote denial-of-service vulnerabilities. One is a null pointer dereference in sapdbwa_GetUserData(), the other is improper handling of malformed HTTP headers, both leading to crashes. The issue...

iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities

MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities iDEFENSE Security Advisory 01.19.05 www.idefense.com/application/poi/display?id=187&type=vulnerabilities January 19, 2005 I. BACKGROUND MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's open source database...

CVE-2005-0111

Affected: MaxDB WebSQL CGI in MySQL MaxDB 7.5.00. The vulnerability is a stack-based buffer overflow triggered by a long password parameter, allowing remote code execution over the network. Remediation/mitigation: upgrade to MaxDB WebSQL 7.5.00.18 or later (as indicated by related Nessus entry fo...