CVE-2004-0931

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.

Affected products

Mysql Maxdb: 7.5.00.08, 7.5.00.11, 7.5.00.12, 7.5.00.14, 7.5.00.15, 7.5.00.16

References

http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false
http://www.osvdb.org/10532
http://www.secunia.com/advisories/12756
http://www.securityfocus.com/bid/11346
https://exchange.xforce.ibmcloud.com/vulnerabilities/17633
http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false
http://www.osvdb.org/10532
http://www.secunia.com/advisories/12756
http://www.securityfocus.com/bid/11346
https://exchange.xforce.ibmcloud.com/vulnerabilities/17633

Get alerted when CVE-2004-0931 or the next vulnerability affects your stack