Description
Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption.
References
- 26347 vdb-entry
- http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt
- openbasesql-stored-procedures-bo(38289) vdb-entry
- 27525 third-party-advisory