PT-2026-24772 · Top Password · Sql Server Password Changer Denial Of Service Exploit

Published 2026-03-11 · Updated 2026-03-11 · CVE-2019-25475

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SQL Server Password Changer version 1.90

Description The software contains a buffer overflow issue that allows local attackers to cause a denial of service. An attacker can inject 6000 bytes of data into the User Name and Registration Code field to trigger this condition. The vulnerability allows attackers to crash the application by supplying an oversized payload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25475

Affected Products

Sql Server Password Changer Denial Of Service Exploit

References · 3

• 🔥 https://exploit-db.com/exploits/47318 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25475 · Security Note
• https://vulncheck.com/advisories/sql-server-password-changer-denial-of-service-buffer-overflow · Note