Description
MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.
References
- 20041207 MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service mailing-list
- maxdb-dos(18387) vdb-entry