CVE Vulnerabilities

CVE-2004-1169

Published: Jan 10, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.

Affected Software

Name Vendor Start Version End Version
Maxdb Mysql 7.5.00.08 7.5.00.08
Maxdb Mysql 7.5.00.11 7.5.00.11
Maxdb Mysql 7.5.00.12 7.5.00.12
Maxdb Mysql 7.5.00.14 7.5.00.14
Maxdb Mysql 7.5.00.15 7.5.00.15
Maxdb Mysql 7.5.00.16 7.5.00.16
Maxdb Mysql 7.5.00.18 7.5.00.18

References