CyberSec.Space Logo
CVEブラウザに戻る

CVE-2004-1168

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0230%
EPSS Percentile3.61th
Published2005年1月10日
Last Modified2026年4月16日

Vulnerability Description

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.

Affected Platforms (CPE)

📦
Mysql

Maxdb

= 7.5.00.08
📦
Mysql

Maxdb

= 7.5.00.11
📦
Mysql

Maxdb

= 7.5.00.12
📦
Mysql

Maxdb

= 7.5.00.14
📦
Mysql

Maxdb

= 7.5.00.15
📦
Mysql

Maxdb

= 7.5.00.16
📦
Mysql

Maxdb

= 7.5.00.18

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=110244542000340&w=2
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18386
🔗 http://marc.info/?l=bugtraq&m=110244542000340&w=2
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18386

関連する脆弱性情報

CVE-2005-127410.0

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote ...

CVE-2006-430510.0

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name wh...

CVE-2005-068410.0

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (...

CVE-2008-024410.0

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacte...