CVE-2005-0082 The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler c...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mysql maxdb | = 7.5.00 | No fix listed |
| mysql maxdb | = 7.5.00.08 | No fix listed |
| mysql maxdb | = 7.5.00.11 | No fix listed |
| mysql maxdb | = 7.5.00.12 | No fix listed |
| mysql maxdb | = 7.5.00.14 | No fix listed |
| mysql maxdb | = 7.5.00.15 | No fix listed |
| mysql maxdb | = 7.5.00.16 | No fix listed |
| mysql maxdb | = 7.5.00.18 | No fix listed |
| mysql maxdb | = 7.5.00.19 | No fix listed |
References
- 20050119 MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities patch third-party-advisory vendor-advisory