Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTT…

published 2005-04-25 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-0685

cvss: 10.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 68.5%; EPSS 68.5% chance of exploitation in 30 days, percentile 99.3%
public exploits: 2; Metasploit, Exploit-DB

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.

Patch / fix

links 3

Timeline

2005-04-25 Published
2005-04-26 First public exploit (Metasploit exploit/windows/http/maxdb_webdbm_get_overflow)

Exploit prediction

68.50% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit exploit/windows/http/maxdb_webdbm_get_overflow MaxDB WebDBM GET Buffer Overflow metasploit exploit, good rank, 2005-04-26
EDB-16791 MaxDB WebDBM - GET Buffer Overflow (Metasploit) remote, 2010-05-09

CVSS scores

assigned by	version	score	vector
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

References

idefense.com /application/poi/display?id=234&type=vulnerabilities
third-party-advisory, patch, vendor-advisory
dev.mysql.com /doc/maxdb/changes/changes_7.5.00.26.html#WebDAV
patch, vendor-advisory
idefense.com /application/poi/display?id=235&type=vulnerabilities
third-party-advisory, patch, vendor-advisory
securityfocus.com /bid/13368
vdb-entry

Sources

CVE List CVE-2005-0684
NVD CVE-2005-0684

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary