Secunia

Evgeny Demidov has reported two vulnerabilities in MaxDB, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) A boundary error within the WebDAV handler can be exploited to cause a stack-based buffer overflow by passing an overly long "Overwrite" header.

Successful exploitation allows execution of arbitrary code.

2) A NULL pointer dereference error in WAHTTP can be exploited to crash the service by sending a specially crafted HTTP request without a "Host:" header.

The vulnerabilities have been reported in version 7.5.00.18 and prior.

Solution
The vulnerabilities have reportedly been fixed in version 7.5.00.19:
Further details available in Customer Area

Provided and/or discovered by
Evgeny Demidov

Changelog
Further details available in Customer Area

Original Advisory
http://www.gleg.net/advisory_maxdb.shtml

Deep Links
Links available in Customer Area