漏洞描述
Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/19660↗www.debian.orghttp://www.debian.org/security/2006/dsa-1190↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/28636↗www.symantec.comhttp://www.symantec.com/enterprise/research/SYMSA-2006-009.txt↗dev.mysql.comhttp://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html↗secunia.comhttp://secunia.com/advisories/22518↗secunia.comhttp://secunia.com/advisories/21677↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/444601/100/0/threaded↗securitytracker.comhttp://securitytracker.com/id?1016766↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/3410↗