Denial of Service Vulnerability in MaxDB WebTools by SAP
CVE-2004-1169

Currently unrated

Key Information:

Vendor

Mysql

Status
Maxdb
Vendor
CVE Published:
10 January 2005

What is CVE-2004-1169?

MaxDB WebTools versions 7.5.00.18 and earlier are susceptible to a denial of service attack, where remote attackers can exploit the system by sending a malformed HTTP GET request targeting a non-existent file. This can lead to a NULL dereference, ultimately causing the application to crash and rendering it unavailable to legitimate users. Proper input validation and handling of HTTP requests are essential to mitigate this vulnerability.

References

http://marc.info/?l=bugtraq&m=110244542000340&w=2
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/18387
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.