Vulnerability in N/a
CVE-2006-4305
Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client.
EPSS: 0.805 (99.2th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- maxdb-webdbm-bo(28636) (vdb-entry, x_refsource_XF)
- www.symantec.com/enterprise/research/SYMSA-2006-009.txt (x_refsource_MISC)
- DSA-1190 (vendor-advisory, x_refsource_DEBIAN)
- 20060828 SYMSA-2006-009 (mailing-list, x_refsource_BUGTRAQ)
- 21677 (x_refsource_SECUNIA, third-party-advisory)
- 22518 (x_refsource_SECUNIA, third-party-advisory)
- dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html (x_refsource_CONFIRM)
- 1016766 (vdb-entry, x_refsource_SECTRACK)
- ADV-2006-3410 (vdb-entry, x_refsource_VUPEN)
- 19660 (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2006-4305?
- CVE-2006-4305 is a vulnerability in N/a. Published 2006-08-30.
- Is CVE-2006-4305 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.