Vulnerability Details : CVE-2005-0684
Public exploit exists!
Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.
Vulnerability category: Execute code
Products affected by CVE-2005-0684
- cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.18:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.19:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:maxdb:7.5.00.23:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2005-0684
73.98%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2005-0684
-
MaxDB WebDBM GET Buffer Overflow
Disclosure Date: 2005-04-26First seen: 2020-04-26exploit/windows/http/maxdb_webdbm_get_overflowThis module exploits a stack buffer overflow in the MaxDB WebDBM service. This service is included with many recent versions of the MaxDB and SAPDB products. This particular module is capable of exploiting Windows systems through the use of an SEH frame ove
CVSS scores for CVE-2005-0684
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2005-0684
-
http://www.idefense.com/application/poi/display?id=235&type=vulnerabilities
Patch;Vendor Advisory
-
http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities
Accenture acquires iDefense | AccenturePatch;Vendor Advisory
-
http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV
Patch;Vendor Advisory
-
http://www.securityfocus.com/bid/13368
MySQL MaxDB HTTP GET Request Remote Buffer Overflow Vulnerability
Jump to