PT-2015-2772 · Microsoft · Sql Server

Publicado 2015-07-14 · Atualizado 2018-10-12 · CVE-2015-1762

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2008 SP3 through 2014

Description The issue is related to the lack of forced blocking of access to uninitialized memory areas in Microsoft SQL Server, allowing remote authenticated users to execute arbitrary code by making a crafted query. This can be achieved by leveraging certain permissions, such as the VIEW SERVER STATE permission. An attacker could exploit this issue if a privileged user runs a specially crafted query on an affected SQL server with specific permission settings turned on, potentially allowing the attacker to take complete control of the affected system.

Recommendations For Microsoft SQL Server versions 2008 SP3 through 2014, consider restricting access to the VIEW SERVER STATE permission to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid running specially crafted queries on affected SQL servers with special permission settings turned on. Restrict access to internal function calls that handle uninitialized memory to prevent potential exploitation.

Correção

RCE

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

BDU:2015-12137

CVE-2015-1762

Produtos afetados

Sql Server

Referências · 7

• http://technet.microsoft.com/security/bulletin/ms15-058 · Nota
• https://bdu.fstec.ru/vul/2015-12137 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/MS15-058 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1762 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1762 · Nota de Segurança
• http://securitytracker.com/id/1032893 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058 · Aviso do Fabricante