Microsoft SQL Server / Data Engine xp_showcolv缓冲区溢出漏洞

漏洞信息详情

Microsoft SQL Server / Data Engine xp_showcolv缓冲区溢出漏洞

• CNNVD编号：CNNVD-200101-112
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2000-1083
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2001-01-09
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2006-09-01
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Discovered by Davi…

SQL Server和Microsoft SQL Server Desktop Engine (MSDE)的xp_showcolv函数在调用Extended Stored Procedures (XP)的SQL Server API中的srv_paraminfo函数之前不能正确地限制缓冲区的长度，攻击者可以导致服务拒绝或者执行任意命令，也称为\”Extended Stored Procedure Parameter Parsing\”漏洞。

Microsoft has released the following patches which eliminate the vulnerability:
Microsoft SQL Server 2000

• Microsoft Q280380Intel
  
  http://download.microsoft.com/download/SQLSVR2000/ss2kxp/2000/W98NT42K
  Me/EN-US/s80233i.exe

Microsoft SQL Server 7.0

• Microsoft Q280380Intel
  
  http://download.microsoft.com/download/sql70/Patch/7.0/WIN98Me/EN-US/s
  70918i.exe
• Microsoft Q280380Alpha
  
  http://download.microsoft.com/download/sql70/ss7pespv/7.0/ALPHA/EN-US/
  s70918a.exe

来源: BID
名称: 2038
链接:http://www.securityfocus.com/bid/2038

来源: MS
名称: MS00-092
链接:http://www.microsoft.com/technet/security/bulletin/ms00-092.asp

来源: ATSTAKE
名称: 20001201 Microsoft SQL Server extended stored procedure vulnerability
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=97570878710037&w=2