Lucene search
K

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow

🗓️ 14 Jun 2002 00:00:00Reported by Martin RakhmanoffType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 31 Views

Buffer overflow in SQL Server 2000 allows attackers to exploit password encrypt procedure with excessive input.

Code
source: https://www.securityfocus.com/bid/5014/info

A buffer overflow vulnerability has been reported in SQL Server 2000. The vunerability is a result of an unchecked buffer when using the password encrypt procedure. This procedure is used by administrators to provides support for the storage of SQL Server Authentication credentials.

The overrun condition is due to an unbounded data copy operation that occurs when processing the procedure arguments. Attackers may exploit this vulnerability by invoking the password encrypt procedure with excessive input.

SELECT pwdencrypt(REPLICATE('A',353))

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation