PT-2008-5412 · Microsoft · Sql Server 2000+1

Beenu Arora + 1 · Published 2008-09-16 · Updated 2018-10-11 · CVE-2008-4110

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2000 (aka SQL Server 8.0)

Description A buffer overflow issue exists in the SQLVDIRLib.SQLVDirControl ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code. This is achieved by providing a long URL in the second argument to the Connect method. However, in many environments, this issue may not be considered a vulnerability due to the control not being marked as safe for scripting and default Internet Explorer settings preventing its execution.

Recommendations For Microsoft SQL Server 2000, consider restricting access to the SQLVDIRLib.SQLVDirControl ActiveX control to minimize the risk of exploitation. As a temporary workaround, avoid using the Connect method with long URLs until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4110

Affected Products

Internet Explorer

Sql Server 2000

References · 5

• 🔥 http://securityfocus.com/bid/31129 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4110 · Security Note
• http://securityfocus.com/archive/1/496232/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45186 · Note
• http://securityreason.com/securityalert/4262 · Note