PT-2003-1320 · Protegrity · Protegrity Secure.Data Extension Feature

Sss Sss · Published 2003-03-14 · Updated 2016-10-18 · CVE-2003-0030

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Protegrity Secure.Data Extension Feature (SEF) versions prior to 2.2.3.9

Description The issue concerns buffer overflows in the protegrity.dll component, allowing attackers with SQL access to execute arbitrary code. This can be achieved through the extended stored procedures xp pty checkusers, xp pty insert, or xp pty select.

Recommendations For versions prior to 2.2.3.9, update to version 2.2.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the extended stored procedures xp pty checkusers, xp pty insert, and xp pty select to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2003-0030

Affected Products

Protegrity Secure.Data Extension Feature

References · 7

• http://securityfocus.com/bid/7083 · Vendor Advisory
• http://securityfocus.com/bid/7085 · Vendor Advisory
• http://securityfocus.com/bid/7084 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0030 · Security Note
• http://kb.cert.org/vuls/id/247545 · Patch
• http://marc.info/?l=bugtraq&m=104758650516677&w=2 · Note
• http://secunia.com/advisories/8294 · Note