PT-2008-1761 · Microsoft · Sql Server 2005 Sp2+4

Publicado 2008-07-08 · Atualizado 2018-10-15 · CVE-2008-0106

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2005 SP1 Microsoft SQL Server 2005 SP2 Microsoft SQL Server 2005 Express Edition SP1 Microsoft SQL Server 2005 Express Edition SP2

Description A buffer overflow issue exists, allowing remote authenticated users to execute arbitrary code via a crafted insert statement. This could enable an authenticated attacker to gain elevation of privilege, potentially running code and taking complete control of the system.

Recommendations For Microsoft SQL Server 2005 SP1, update to a version that includes the fix for this issue. For Microsoft SQL Server 2005 SP2, update to a version that includes the fix for this issue. For Microsoft SQL Server 2005 Express Edition SP1, update to a version that includes the fix for this issue. For Microsoft SQL Server 2005 Express Edition SP2, update to a version that includes the fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0106

Produtos afetados

Sql Server 2005 Express Edition Sp1

Sql Server 2005 Express Edition Sp2

Sql Server 2005 Sp1

Sql Server 2005 Sp2

Sql Server

Referências · 12

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13785 · Nota
• http://us-cert.gov/cas/techalerts/TA08-190A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0106 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0106 · Nota de Segurança
• http://vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html · Nota
• http://vupen.com/english/advisories/2008/2022/references · Nota
• http://securityfocus.com/archive/1/516397/100/0/threaded · Nota
• http://secunia.com/advisories/30970 · Nota
• http://securitytracker.com/id?1020441 · Nota
• http://vmware.com/security/advisories/VMSA-2011-0003.html · Nota
• http://securityfocus.com/archive/1/494082/100/0/threaded · Nota