MySQL MaxDB Buffer Overflow in websql Password Parameter Lets Remote Users Execute Arbitrary Code
Categorie: Vulnerability Posted: 2005-01-15 by ReCall Views: 444 Source: Click here
Current Rating: Not rated
Details
Description: iDEFENSE reported a buffer overflow in MySQL MaxDB. A remote user can execute arbitrary code on the target system.
The websql application does not properly validate the bounds of user-supplied input. A remote user can supply a specially crafted password parameter to trigger a stack overflow and execute arbitrary code (with System level privileges on Windows-based systems).
