PT-2005-1191 · Sap+1 · Sap Db Web Agent+1

Publicado

2005-01-20

·

Atualizado

2011-03-08

·

CVE-2005-0082

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions MySQL MaxDB versions 7.5.0.0 through 7.5.0.20
Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending invalid parameters to the WebDAV handler code. This triggers a null dereference, causing the SAP DB Web Agent to crash.
Recommendations For versions 7.5.0.0 through 7.5.0.20, update to version 7.5.0.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the WebDAV handler code to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-0082

Produtos afetados

Mysql Maxdb
Sap Db Web Agent