critical10.0Public exploit code
CVE-2006-4305
Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM cl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MaxDB WebDBM - 'Database' Remote Overflow (Metasploit)2010-09-20 · remote · windows · Verified
Impact
Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mysql | Maxdb | through 7.6.00.22 |
| Sap-Db | Sap-Db | All versions |
References
- NVD record
- CVE.org record
- http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html
- http://secunia.com/advisories/21677
- http://secunia.com/advisories/22518
- http://securitytracker.com/id?1016766
- http://www.debian.org/security/2006/dsa-1190
- http://www.securityfocus.com/archive/1/444601/100/0/threaded
- http://www.securityfocus.com/bid/19660
- http://www.symantec.com/enterprise/research/SYMSA-2006-009.txt
- http://www.vupen.com/english/advisories/2006/3410
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28636
- http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html
- http://secunia.com/advisories/21677
- http://secunia.com/advisories/22518
- http://securitytracker.com/id?1016766
- http://www.debian.org/security/2006/dsa-1190
- http://www.securityfocus.com/archive/1/444601/100/0/threaded
- http://www.securityfocus.com/bid/19660
- http://www.symantec.com/enterprise/research/SYMSA-2006-009.txt
- http://www.vupen.com/english/advisories/2006/3410
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28636