PT-2008-1762 · Microsoft · 2000 Desktop Engine+4

Published 2008-07-08 · Updated 2019-02-26 · CVE-2008-0107

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SQL Server versions 7.0 SP4 through 2005 SP2 Microsoft Data Engine (MSDE) version 1.0 SP4 Internal Database (WYukon) version SP2 2000 Desktop Engine (MSDE 2000) version SP4 2005 Express Edition versions SP1 through SP2

Description The issue allows remote authenticated users to execute arbitrary code, potentially leading to elevation of privilege, where an attacker could run code and take complete control of the system. This is achieved via a crafted record size value in a pathname for an on-disk file, which triggers a heap-based buffer overflow.

Recommendations For SQL Server versions 7.0 SP4 through 2005 SP2, consider restricting access to the SQL Server until a patch is available. For Microsoft Data Engine (MSDE) version 1.0 SP4, restrict access to the database engine to minimize the risk of exploitation. For Internal Database (WYukon) version SP2, avoid using the vulnerable database functions until the issue is resolved. For 2000 Desktop Engine (MSDE 2000) version SP4 and 2005 Express Edition versions SP1 through SP2, consider disabling the WebDAV and SMB pathways to prevent exploitation.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-0107

Affected Products

2000 Desktop Engine

2005 Express Edition

Internal Database

Data Engine

Sql Server

References · 15

• http://vupen.com/english/advisories/2008/2022/references · Vendor Advisory
• http://secunia.com/advisories/30970 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0107 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-0107 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA08-190A.html · Note
• http://securityfocus.com/bid/30119 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=723 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13936 · Note
• http://vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html · Note
• http://securityfocus.com/archive/1/516397/100/0/threaded · Note
• http://insomniasec.com/advisories/ISVA-080709.1.htm · Note
• http://securitytracker.com/id?1020441 · Note
• http://vmware.com/security/advisories/VMSA-2011-0003.html · Note
• http://securityfocus.com/archive/1/494082/100/0/threaded · Note