MySQL MaxDB WebDBM Server Name Denial of Service Vulnerability
BID:11346
Info
MySQL MaxDB WebDBM Server Name Denial of Service Vulnerability
| Bugtraq ID: | 11346 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-0931 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 07 2004 12:00AM |
| Updated: | Jul 12 2009 07:06AM |
| Credit: | Discovery is credited to Patrik Karlsson. |
| Vulnerable: |
SAP DB 7.5 MySQL AB MaxDB 7.5 .00.16 MySQL AB MaxDB 7.5 .00.15 MySQL AB MaxDB 7.5 .00.14 MySQL AB MaxDB 7.5 .00.12 MySQL AB MaxDB 7.5 .00.11 MySQL AB MaxDB 7.5 .00.08 |
| Not Vulnerable: |
MySQL AB MaxDB 7.5 .00.18 |
Discussion
MySQL MaxDB WebDBM Server Name Denial of Service Vulnerability
A remotely exploitable denial of service vulnerability exists in MaxDB. The cause of this condition is an input validation error that is exposed when an internal function in the WebDBM handles a client-supplied 'Server' name in an HTTP request that includes specific values.
This will reportedly trigger an exception due to an assert directive failing, resulting in a denial of service condition in the web agent.
This issue was reportedly tested on Windows and Linux versions. Other versions could also be affected.
A remotely exploitable denial of service vulnerability exists in MaxDB. The cause of this condition is an input validation error that is exposed when an internal function in the WebDBM handles a client-supplied 'Server' name in an HTTP request that includes specific values.
This will reportedly trigger an exception due to an assert directive failing, resulting in a denial of service condition in the web agent.
This issue was reportedly tested on Windows and Linux versions. Other versions could also be affected.
Exploit / POC
MySQL MaxDB WebDBM Server Name Denial of Service Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
MySQL MaxDB WebDBM Server Name Denial of Service Vulnerability
Solution:
This issue has been addressed in MaxDB 7.5.00.18.
MySQL AB MaxDB 7.5 .00.14
MySQL AB MaxDB 7.5 .00.11
MySQL AB MaxDB 7.5 .00.15
MySQL AB MaxDB 7.5 .00.08
MySQL AB MaxDB 7.5 .00.12
MySQL AB MaxDB 7.5 .00.16
Solution:
This issue has been addressed in MaxDB 7.5.00.18.
MySQL AB MaxDB 7.5 .00.14
-
MySQL AB MaxDB 7.5.00.18
http://dev.mysql.com/downloads/maxdb/7.5.00.html
MySQL AB MaxDB 7.5 .00.11
-
MySQL AB MaxDB 7.5.00.18
http://dev.mysql.com/downloads/maxdb/7.5.00.html
MySQL AB MaxDB 7.5 .00.15
-
MySQL AB MaxDB 7.5.00.18
http://dev.mysql.com/downloads/maxdb/7.5.00.html
MySQL AB MaxDB 7.5 .00.08
-
MySQL AB MaxDB 7.5.00.18
http://dev.mysql.com/downloads/maxdb/7.5.00.html
MySQL AB MaxDB 7.5 .00.12
-
MySQL AB MaxDB 7.5.00.18
http://dev.mysql.com/downloads/maxdb/7.5.00.html
MySQL AB MaxDB 7.5 .00.16
-
MySQL AB MaxDB 7.5.00.18
http://dev.mysql.com/downloads/maxdb/7.5.00.html
References
MySQL MaxDB WebDBM Server Name Denial of Service Vulnerability
References:
References:
- MaxDB Homepage (MySQL AB)
- MySQL MaxDB Web Agent WebDBM Server Name Denial of Service Vulnerability (iDEFENSE)