PT-2008-5412 · Microsoft · Sql Server 2000+1

Beenu Arora + 1 · Publicado 2008-09-16 · Atualizado 2018-10-11 · CVE-2008-4110

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2000 (aka SQL Server 8.0)

Description A buffer overflow issue exists in the SQLVDIRLib.SQLVDirControl ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code. This is achieved by providing a long URL in the second argument to the Connect method. However, in many environments, this issue may not be considered a vulnerability due to the control not being marked as safe for scripting and default Internet Explorer settings preventing its execution.

Recommendations For Microsoft SQL Server 2000, consider restricting access to the SQLVDIRLib.SQLVDirControl ActiveX control to minimize the risk of exploitation. As a temporary workaround, avoid using the Connect method with long URLs until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-4110

Produtos afetados

Internet Explorer

Sql Server 2000

Referências · 5

• 🔥 http://securityfocus.com/bid/31129 · Exploit
• http://securityfocus.com/archive/1/496232/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45186 · Nota
• http://securityreason.com/securityalert/4262 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4110 · Nota de Segurança