CVE-2004-1168 Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.
HighCVSS 10.0
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mysql maxdb | = 7.5.00.08 | No fix listed |
| mysql maxdb | = 7.5.00.11 | No fix listed |
| mysql maxdb | = 7.5.00.12 | No fix listed |
| mysql maxdb | = 7.5.00.14 | No fix listed |
| mysql maxdb | = 7.5.00.15 | No fix listed |
| mysql maxdb | = 7.5.00.16 | No fix listed |
| mysql maxdb | = 7.5.00.18 | No fix listed |
References
- 20041207 MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service mailing-list
- maxdb-webdav-bo(18386) vdb-entry