Microsoft SQL Server Remote Denial Of Service Vulnerability
BID:11265
Info
Microsoft SQL Server Remote Denial Of Service Vulnerability
| Bugtraq ID: | 11265 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 28 2004 12:00AM |
| Updated: | Sep 28 2004 12:00AM |
| Credit: | Discovery of this issue is credited to securma massine. |
| Vulnerable: |
Microsoft SQL Server 7.0 SP4 Microsoft SQL Server 7.0 SP3 Microsoft SQL Server 7.0 SP2 Microsoft SQL Server 7.0 SP1 Microsoft SQL Server 7.0 |
| Not Vulnerable: | |
Discussion
Microsoft SQL Server Remote Denial Of Service Vulnerability
Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications.
An attacker may leverage this issue to cause the affected server to crash, denying service to legitimate users.
Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications.
An attacker may leverage this issue to cause the affected server to crash, denying service to legitimate users.
Exploit / POC
Microsoft SQL Server Remote Denial Of Service Vulnerability
The following proof of concept exploits have been provided by securma massine and Sebastien Tricaud <[email protected]>:
The following proof of concept exploits have been provided by securma massine and Sebastien Tricaud <[email protected]>:
Solution / Fix
Microsoft SQL Server Remote Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft SQL Server Remote Denial Of Service Vulnerability
References:
References:
- Microsoft SQL Server Homepage (Microsoft)
- MSSQL 7.0 DoS ([email protected])