← back
CVE-2005-0684

CVE-2005-0684

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 69%
from disclosure to weapon1839 days
Published on NVDApr 26
1st PoC+1839d
metasploitApr 26
exploitation probability
69%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.