Login Request a demo
Unscored severity · published Dec 31, 2004
CVE-2004-0931
MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers…
–
CVSS
1.8%
EPSS
No
On KEV
Description
MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Maxdb · Mysql
7.5.00.08; 7.5.00.11; 7.5.00.12; 7.5.00.14; 7.5.00.15; 7.5.00.16 · source: NVD
Affected product
MA
Maxdb
Mysql
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0931
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0931
www.idefense.com
http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false
www.osvdb.org
http://www.osvdb.org/10532
Patch
http://www.secunia.com/advisories/12756
Patch
http://www.securityfocus.com/bid/11346
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17633
More from Maxdb
–
CVE-2006-4305
Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client
–
CVE-2005-0083
MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters…
–
CVE-2005-1274
Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP…
–
CVE-2005-0684
Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter…
–
CVE-2005-0082
The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to…