Lucene search

Tenable9827.PRM

HistoryDec 12, 2016 - 12:00 a.m.

Microsoft SQL Server 2012 SP2 11.0.5500.0 through 11.0.5592.0 Multiple Vulnerabilities (3045319)

2016-12-1200:00:00

Tenable

www.tenable.com

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.06

Percentile

93.6%

JSON

The remote host is running a version of Microsoft SQL Server 2012 SP2 11.0.5500.0 through 11.0.5592.0 and is affected by multiple vulnerabilities :

An unspecified type-casting flaw exists. With a specially crafted query, an authenticated, remote attacker can potentially gain escalated privileges. (CVE-2015-1761)
An unspecified flaw exists related to use of uninitialized memory. With a specially crafted query, an authenticated, remote attacker can potentially execute arbitrary code on the system. (CVE-2015-1762, CVE-2015-1763)

Binary data 9827.prm

VendorProductVersionCPE
microsoftsql_server2012cpe:/a:microsoft:sql_server:2012:sp2

Vendor	Product	Version	CPE
microsoft	sql_server	2012	cpe:/a:microsoft:sql_server:2012:sp2

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1761

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1762

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1763

technet.microsoft.com/library/security/MS15-058

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.06

Percentile

93.6%

JSON

Related for 9827.PRM