CVE-2006-4305: mysql maxdb

EPSS trend

Probability

71.75%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

+0.45 pp

From 71.30% on 21-09-2026

21-09-202621-10-2026

EPSS score

71.75%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaseremotewindowsVerified
MaxDB WebDBM - 'Database' Remote Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
MaxDB WebDBM Database Parameter Overflow
exploit/windows/http/maxdb_webdbm_database
Maturity: weaponized

References

10 links

exchange.xforce.ibmcloud.com/vulnerabilities/28636VDB EntryX Refsource XF
www.symantec.com/enterprise/research/SYMSA-2006-009.txtX Refsource MISCVendor Advisory
www.debian.org/security/2006/dsa-1190Vendor AdvisoryX Refsource DEBIANPatch
www.securityfocus.com/archive/1/444601/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21677Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22518Third Party AdvisoryX Refsource SECUNIAVendor Advisory
dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.htmlX Refsource CONFIRM
securitytracker.com/id?1016766VDB EntryX Refsource SECTRACKVendor Advisory
www.vupen.com/english/advisories/2006/3410VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/19660VDB EntryX Refsource BIDPatch

Related vulnerabilities

CVE-2005-1274mysqlmaxdb4.20%21y ago26-04-2005 04:00Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.CVE-2005-0081mysqlmaxdb1.52%21y ago20-01-2005 05:00MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers.CVE-2005-0082mysqlmaxdb1.43%21y ago20-01-2005 05:00The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash.CVE-2005-0111mysqlmaxdb3.84%21y ago19-01-2005 05:00Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter.CVE-2005-0684mysqlmaxdb68.50%21y ago26-04-2005 04:00Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.CVE-2005-0083mysqlmaxdb1.41%21y ago17-03-2005 05:00MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference.

All vulnerabilities inmaxdb

CVE-2006-4305: mysql maxdb

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References