PT-2008-1741 · Microsoft · Sql Server 2000 Desktop Engine (Msde 2000) Sp4+3

Published 2008-07-08 · Updated 2018-10-15 · CVE-2008-0086

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2000 SP4 Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP4 Microsoft SQL Server 2000 Desktop Engine (WMSDE) SP4

Description A buffer overflow issue exists in the convert function of SQL Server, allowing remote authenticated users to execute arbitrary code via a crafted SQL expression. This could enable an authenticated attacker to gain elevation of privilege, potentially running code and taking complete control of the system.

Recommendations For Microsoft SQL Server 2000 SP4, consider restricting access to the convert function until a patch is available. For Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP4, restrict the use of crafted SQL expressions to minimize the risk of exploitation. For Microsoft SQL Server 2000 Desktop Engine (WMSDE) SP4, avoid using the convert function with untrusted input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0086

Affected Products

Sql Server 2000 Desktop Engine (Msde 2000) Sp4

Sql Server 2000 Desktop Engine (Wmsde) Sp4

Sql Server 2000 Sp4

Sql Server

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0086 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-0086 · Security Note
• http://us-cert.gov/cas/techalerts/TA08-190A.html · Note
• http://vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html · Note
• http://vupen.com/english/advisories/2008/2022/references · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14052 · Note
• http://securityfocus.com/archive/1/516397/100/0/threaded · Note
• http://secunia.com/advisories/30970 · Note
• http://securitytracker.com/id?1020441 · Note
• http://vmware.com/security/advisories/VMSA-2011-0003.html · Note
• http://securityfocus.com/archive/1/494082/100/0/threaded · Note