PT-2008-1762 · Microsoft · 2000 Desktop Engine+4

Publicado 2008-07-08 · Atualizado 2019-02-26 · CVE-2008-0107

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SQL Server versions 7.0 SP4 through 2005 SP2 Microsoft Data Engine (MSDE) version 1.0 SP4 Internal Database (WYukon) version SP2 2000 Desktop Engine (MSDE 2000) version SP4 2005 Express Edition versions SP1 through SP2

Description The issue allows remote authenticated users to execute arbitrary code, potentially leading to elevation of privilege, where an attacker could run code and take complete control of the system. This is achieved via a crafted record size value in a pathname for an on-disk file, which triggers a heap-based buffer overflow.

Recommendations For SQL Server versions 7.0 SP4 through 2005 SP2, consider restricting access to the SQL Server until a patch is available. For Microsoft Data Engine (MSDE) version 1.0 SP4, restrict access to the database engine to minimize the risk of exploitation. For Internal Database (WYukon) version SP2, avoid using the vulnerable database functions until the issue is resolved. For 2000 Desktop Engine (MSDE 2000) version SP4 and 2005 Express Edition versions SP1 through SP2, consider disabling the WebDAV and SMB pathways to prevent exploitation.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-0107

Produtos afetados

2000 Desktop Engine

2005 Express Edition

Internal Database

Data Engine

Sql Server

Referências · 15

• http://us-cert.gov/cas/techalerts/TA08-190A.html · Nota
• http://securityfocus.com/bid/30119 · Nota
• http://vupen.com/english/advisories/2008/2022/references · Aviso do Fabricante
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=723 · Nota
• http://secunia.com/advisories/30970 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0107 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2008-0107 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13936 · Nota
• http://vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html · Nota
• http://securityfocus.com/archive/1/516397/100/0/threaded · Nota
• http://insomniasec.com/advisories/ISVA-080709.1.htm · Nota
• http://securitytracker.com/id?1020441 · Nota
• http://vmware.com/security/advisories/VMSA-2011-0003.html · Nota
• http://securityfocus.com/archive/1/494082/100/0/threaded · Nota