CVE-2005-0684

2005-04-2604:00:00

[email protected]

web.nvd.nist.gov

cve-2005-0684

mysql maxdb

buffer overflows

remote code execution

http get request

webdav

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.923 High

EPSS

Percentile

99.0%

JSON

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent (“%”) sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.

Affected configurations

NVD

Node

mysqlmaxdbMatch7.5.00

mysqlmaxdbMatch7.5.00.08

mysqlmaxdbMatch7.5.00.11

mysqlmaxdbMatch7.5.00.12

mysqlmaxdbMatch7.5.00.14

mysqlmaxdbMatch7.5.00.15

mysqlmaxdbMatch7.5.00.16

mysqlmaxdbMatch7.5.00.18

mysqlmaxdbMatch7.5.00.19

mysqlmaxdbMatch7.5.00.23

CPENameOperatorVersion
mysql:maxdbmysql maxdbeq7.5.00
mysql:maxdbmysql maxdbeq7.5.00.08
mysql:maxdbmysql maxdbeq7.5.00.11
mysql:maxdbmysql maxdbeq7.5.00.12
mysql:maxdbmysql maxdbeq7.5.00.14
mysql:maxdbmysql maxdbeq7.5.00.15
mysql:maxdbmysql maxdbeq7.5.00.16
mysql:maxdbmysql maxdbeq7.5.00.18
mysql:maxdbmysql maxdbeq7.5.00.19
mysql:maxdbmysql maxdbeq7.5.00.23

CPE	Name	Operator	Version
mysql:maxdb	mysql maxdb	eq	7.5.00
mysql:maxdb	mysql maxdb	eq	7.5.00.08
mysql:maxdb	mysql maxdb	eq	7.5.00.11
mysql:maxdb	mysql maxdb	eq	7.5.00.12
mysql:maxdb	mysql maxdb	eq	7.5.00.14
mysql:maxdb	mysql maxdb	eq	7.5.00.15
mysql:maxdb	mysql maxdb	eq	7.5.00.16
mysql:maxdb	mysql maxdb	eq	7.5.00.18
mysql:maxdb	mysql maxdb	eq	7.5.00.19
mysql:maxdb	mysql maxdb	eq	7.5.00.23