MySQL MaxDB WebDav Handler Overwrite Header Remote Buffer Overflow Vulnerability
BID:11844
Info
MySQL MaxDB WebDav Handler Overwrite Header Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 11844 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 07 2004 12:00AM |
| Updated: | Dec 07 2004 12:00AM |
| Credit: | This issue was discovered by Evgeny Demidov <[email protected]>. |
| Vulnerable: |
MySQL AB MaxDB 7.5 .00.18 MySQL AB MaxDB 7.5 .00.16 MySQL AB MaxDB 7.5 .00.15 MySQL AB MaxDB 7.5 .00.14 MySQL AB MaxDB 7.5 .00.12 MySQL AB MaxDB 7.5 .00.11 MySQL AB MaxDB 7.5 .00.08 |
| Not Vulnerable: | |
Discussion
MySQL MaxDB WebDav Handler Overwrite Header Remote Buffer Overflow Vulnerability
MySQL MaxDB WebDav Handler is reported prone to a remote buffer overflow vulnerability. This issue results from insufficient boundary checks performed by the application when handling malformed user-supplied data. It is possible that an attacker may leverage this issue to execute arbitrary code on a vulnerable computer.
This issue arises when the WebDav handler processes an excessive 'Overwrite' header. MaxDB versions 7.5.00.18 and prior are affected by this vulnerability.
MySQL MaxDB WebDav Handler is reported prone to a remote buffer overflow vulnerability. This issue results from insufficient boundary checks performed by the application when handling malformed user-supplied data. It is possible that an attacker may leverage this issue to execute arbitrary code on a vulnerable computer.
This issue arises when the WebDav handler processes an excessive 'Overwrite' header. MaxDB versions 7.5.00.18 and prior are affected by this vulnerability.
Exploit / POC
MySQL MaxDB WebDav Handler Overwrite Header Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
MySQL MaxDB WebDav Handler Overwrite Header Remote Buffer Overflow Vulnerability
Solution:
It has been reported that MaxDB 7.5.00.19 has been released to resolve this issue, although this is not confirmed. Users are advised to contact the vendor for more information on obtaining possible upgrades.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It has been reported that MaxDB 7.5.00.19 has been released to resolve this issue, although this is not confirmed. Users are advised to contact the vendor for more information on obtaining possible upgrades.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
MySQL MaxDB WebDav Handler Overwrite Header Remote Buffer Overflow Vulnerability
References:
References:
- MaxDB Homepage (MySQL AB)
- MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service (Evgeny Demidov