CVE-2005-0081

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via an HTTP request with invalid headers...

CVE-2005-0081

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via an HTTP request with invalid headers...

CVE-2005-0082

The sapdbwaGetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash...

CVE-2005-0083

MySQL MaxDB/Web Agent vulnerability CVE-2005-0083 affects MaxDB 7.5.00 for Windows (and possibly earlier/other platforms). Remote input validation errors in DBMCli_String::ReallocString, DBMCli_String::operator, DBMCli_Buffer::ForceResize, DBMCli_Wizard::InstallDatabase, DBMCli_Devspaces::Complet...

CVE-2005-0083

MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service application crash via invalid parameters to the 1 DBMCliString::ReallocString, 2 DBMCliString::operator, 3 DBMCliBuffer::ForceResize, 4...

CVE-2005-0083: Undefined Security Weakness

MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service application crash via invalid parameters to the 1 DBMCliString::ReallocString, 2 DBMCliString::operator, 3 DBMCliBuffer::ForceResize, 4...

iDEFENSE Security Advisory 03.14.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities

MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities iDEFENSE Security Advisory 03.14.05 www.idefense.com/application/poi/display?id=218&type=vulnerabilities March 14, 2005 I. BACKGROUND MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's open source database. MaxD...

CVE-2005-0081

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via an HTTP request with invalid headers...

CVE-2005-0082

The CVE-2005-0082 issue affects MySQL MaxDB 7.5.0.0 and earlier releases up to 7.5.0.20/21, where the sapdbwa_GetUserData function can be abused by remote attackers to crash the SAP DB Web Agent via a null dereference in the WebDAV handler. Red Hat confirms the fixed version is 7.5.0.21, with upd...

CVE-2005-0082

The sapdbwaGetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash...

CVE-2005-0081

MaxDB Web Agent in MySQL MaxDB (version 7.5.0.0 and older builds prior to 7.5.0.21) is affected by two remote denial-of-service vulnerabilities. One is a null pointer dereference in sapdbwa_GetUserData(), the other is improper handling of malformed HTTP headers, both leading to crashes. The issue...

iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities

MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities iDEFENSE Security Advisory 01.19.05 www.idefense.com/application/poi/display?id=187&type=vulnerabilities January 19, 2005 I. BACKGROUND MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's open source database...

CVE-2005-0082: Undefined Security Weakness

The sapdbwaGetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash...

CVE-2005-0081: Undefined Security Weakness

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via an HTTP request with invalid headers...

CVE-2004-0931

MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service crash via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function...

CVE-2005-0111

Affected: MaxDB WebSQL CGI in MySQL MaxDB 7.5.00. The vulnerability is a stack-based buffer overflow triggered by a long password parameter, allowing remote code execution over the network. Remediation/mitigation: upgrade to MaxDB WebSQL 7.5.00.18 or later (as indicated by related Nessus entry fo...

CVE-2005-0111

Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter...

CVE-2004-0931

CVE-2004-0931 affects MySQL MaxDB prior to 7.5.00.18. The vulnerability lies in the WebDBM server component where a remote attacker can send an HTTP request to the webdbm with high-ASCII values in the Server field, triggering an assert in IsAscii7 and causing a denial-of-service crash. Public ref...

CVE-2004-0931: Undefined Security Weakness

MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service crash via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function...

CVE-2005-0111: Undefined Security Weakness

Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter...