CVE-2006-4305

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html
http://secunia.com/advisories/21677Vendor Advisory
http://secunia.com/advisories/22518Vendor Advisory
http://securitytracker.com/id?1016766Vendor Advisory
http://www.debian.org/security/2006/dsa-1190Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/444601/100/0/threaded
http://www.securityfocus.com/bid/19660Patch
http://www.symantec.com/enterprise/research/SYMSA-2006-009.txtVendor Advisory
http://www.vupen.com/english/advisories/2006/3410
https://exchange.xforce.ibmcloud.com/vulnerabilities/28636
http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html
http://secunia.com/advisories/21677Vendor Advisory
http://secunia.com/advisories/22518Vendor Advisory
http://securitytracker.com/id?1016766Vendor Advisory
http://www.debian.org/security/2006/dsa-1190Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/444601/100/0/threaded
http://www.securityfocus.com/bid/19660Patch
http://www.symantec.com/enterprise/research/SYMSA-2006-009.txtVendor Advisory
http://www.vupen.com/english/advisories/2006/3410
https://exchange.xforce.ibmcloud.com/vulnerabilities/28636

Timeline

Published: Aug 30, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-43067.2Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, i CVE-2006-43077.2Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unsp CVE-2006-43084.3Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23 CVE-2006-430910.0VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or CVE-2006-43104.3Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect CVE-2006-43117.5PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the fo CVE-2006-43126.8Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to CVE-2006-43135.0Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow a CVE-2006-43145.0The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial of service (hang) via CVE-2006-43157.2Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Ser CVE-2006-43167.2SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a proc CVE-2006-43176.8Cross-site scripting (XSS) vulnerability in attachment.php in WoltLab Burning Board (WBB) 2.3.5 allows remote attackers to inject arbitrary