CIA RESEARCH
Alerts
[CIA-1064-Alert] MaxDB WebDBM Buffer Overflow
Summary:
A vulnerability in the MaxDB WebDBM interface allows a remote attacker to execute arbitrary code via a long database name.
Technical Details:
A vulnerability in the MaxDB WebDBM web service allows a remote attacker to execute arbitrary code. The MaxDB WebDBM service runs on port 9999 and allows users to view and configure system databases. Authentication is not required to successfully exploit the vulnerability. By making a request with a specially crafted database name it is possible to cause code to execute on the target system. Users should download a fixed version of the MaxDB webtools, or follow vendor supplied workaround.
As a temporary the SAP-DB-WWW service should be disabled until a security fix is applied.
Solution:
SAP Customers should download a fixed version from the following URL:
http://www.service.sap.com/
MaxDB has released a fixed version at the following URL:
http://dev.mysql.com/downloads/maxdb/7.6.00.html
CVE Reference:
CVE-2006-4305
SecurityTracker Number(s):
1016766
Vendor URL:
MaxDB Website
About the Cenzic CIA Team:
Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.
About Cenzic:
Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC
|
