CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-4305

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1810%
EPSS Percentile13.51th
Published2006年8月30日
Last Modified2026年4月16日

Vulnerability Description

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client.

Affected Platforms (CPE)

📦
Mysql

Maxdb

<= 7.6.00.22
📦
Sap Db

Sap Db

All versions

References & Advisories

🔗 http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html
🔗 http://secunia.com/advisories/21677
🔗 http://secunia.com/advisories/22518
🔗 http://securitytracker.com/id?1016766
🔗 http://www.debian.org/security/2006/dsa-1190
🔗 http://www.securityfocus.com/archive/1/444601/100/0/threaded
🔗 http://www.securityfocus.com/bid/19660
🔗 http://www.symantec.com/enterprise/research/SYMSA-2006-009.txt

関連する脆弱性情報

CVE-2005-127410.0

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote ...

CVE-2005-068410.0

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (...

CVE-2004-116810.0

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbit...

CVE-2008-024410.0

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacte...