vendor:
MaxDB
by:
cybertronic
9
CVSS
CRITICAL
Stack Overflow
119
CWE
Product Name: MaxDB
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: CVE-2005-0897
CPE: a:mysql:maxdb
Platforms Tested:
2005
MySQL MaxDB Webtool Remote Stack Overflow Exploit
This exploit allows remote attackers to execute arbitrary code via a long GET request to the webtool component. The vulnerability is caused due to a boundary error within the webtool when handling requests with overly long URIs. This can be exploited to cause a stack-based buffer overflow via a specially crafted GET request.
Mitigation:
Apply the appropriate patch or upgrade to a newer version.