PT-2003-1320 · Protegrity · Protegrity Secure.Data Extension Feature

Sss Sss · Publicado 2003-03-14 · Atualizado 2016-10-18 · CVE-2003-0030

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Protegrity Secure.Data Extension Feature (SEF) versions prior to 2.2.3.9

Description The issue concerns buffer overflows in the protegrity.dll component, allowing attackers with SQL access to execute arbitrary code. This can be achieved through the extended stored procedures xp pty checkusers, xp pty insert, or xp pty select.

Recommendations For versions prior to 2.2.3.9, update to version 2.2.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the extended stored procedures xp pty checkusers, xp pty insert, and xp pty select to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2003-0030

Produtos afetados

Protegrity Secure.Data Extension Feature

Referências · 7

• http://securityfocus.com/bid/7083 · Aviso do Fabricante
• http://securityfocus.com/bid/7085 · Aviso do Fabricante
• http://securityfocus.com/bid/7084 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=104758650516677&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0030 · Nota de Segurança
• http://secunia.com/advisories/8294 · Nota
• http://kb.cert.org/vuls/id/247545 · Correção