Microsoft SQL Server / Data Engine xp_proxiedmetadata缓冲区溢出漏洞

漏洞信息详情

Microsoft SQL Server / Data Engine xp_proxiedmetadata缓冲区溢出漏洞

• CNNVD编号：CNNVD-200101-084
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2000-1087
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2001-01-09
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2006-09-01
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Discovered by Chri…

Microsoft SQL Server 2000和SQL Server Desktop Engine (MSDE)中的xp_proxiedmetadata函数在调用Extended Stored Procedures (XP)的SQL Server API for中的srv_paraminfo函数之前不正确的限制缓冲区的长度，攻击者利用该漏洞拒绝服务或者执行任意命令，该漏洞又称为\”Extended Stored Procedure Parameter Parsing\”漏洞。

Microsoft has released the following patches which eliminate the vulnerability:
Microsoft SQL Server 2000

• Microsoft Q280380Intel
  
  http://download.microsoft.com/download/SQLSVR2000/ss2kxp/2000/W98NT42K
  Me/EN-US/s80233i.exe

Microsoft SQL Server 7.0

• Microsoft Q280380Intel
  
  http://download.microsoft.com/download/sql70/Patch/7.0/WIN98Me/EN-US/s
  70918i.exe
• Microsoft Q280380Alpha
  
  http://download.microsoft.com/download/sql70/ss7pespv/7.0/ALPHA/EN-US/
  s70918a.exe

来源: BID
名称: 2042
链接:http://www.securityfocus.com/bid/2042

来源: MS
名称: MS00-092
链接:http://www.microsoft.com/technet/security/bulletin/ms00-092.asp

来源: ATSTAKE
名称: 20001201 SQL Server 2000 Extended Stored Procedure Vulnerability
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=97570884410184&w=2