CVE-2005-0684

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.

• http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAVPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=234&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=235&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.securityfocus.com/bid/13368
• http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAVPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=234&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=235&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.securityfocus.com/bid/13368

Published

Apr 25, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0678PHP remote file inclusion vulnerability in formmail.inc.php …
• CVE-2005-0679PHP remote file inclusion vulnerability in tell_a_friend.inc…
• CVE-2005-0680PHP remote file inclusion vulnerability in download_center_l…
• CVE-2005-0681Nokia Symbian 60 allows remote attackers to cause a denial o…
• CVE-2005-0682Cross-site scripting (XSS) vulnerability in common.inc in Dr…
• CVE-2005-0683Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-0685Multiple access validation errors in OutStart Participate En…
• CVE-2005-0686Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pix…
• CVE-2005-0687Format string vulnerability in Hashcash 1.16 allows remote a…
• CVE-2005-0688Windows Server 2003 and XP SP2, with Windows Firewall turned…
• CVE-2005-0689includer.cgi in The Includer allows remote attackers to exec…
• CVE-2005-0690Gene6 FTP Server does not properly restrict access to the co…