1395 matches found
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
CVE-2000-0485
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service DTS package Properties dialog, aka the "DTS Password" vulnerability...
Microsoft SQL Server Payload Execution
This module executes an arbitrary payload on a Microsoft SQL Server by using the "xpcmdshell" stored procedure. Currently, three delivery methods are supported. First, the original method uses Windows 'debug.com'. File size restrictions are avoided by incorporating the debug bypass method present...
Microsoft SQL Server Payload Execution via SQL Injection
This module will execute an arbitrary payload on a Microsoft SQL Server, using a SQL injection vulnerability. Once a vulnerability is identified this module will use xpcmdshell to upload and execute Metasploit payloads. It is necessary to specify the exact point where the SQL injection...
CVE-2000-0202
Microsoft SQL Server 7.0 and Microsoft Data Engine MSDE 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query...
CVE-2000-0202
Microsoft SQL Server 7.0 and Microsoft Data Engine MSDE 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query...
MS99-059: Microsoft SQL Server Crafted TCP Packet Remote DoS (uncredentialed check)
The remote Microsoft SQL server can be shut down when it is sent a TCP packet containing more than 2 NULLs. An attacker may use this problem to prevent it from being used by legitimate clients, thus threatening your business. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Microsoft SQL Server 7.0/7.0 SP1 - NULL Data Denial of Service
// source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception EXCEPTIONACCESS VIOLATION". / sqldos.c -- a DoS attack agains MS...
Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service
Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service // source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception...
Microsoft SQL Server TCP/IP Listener Detection
The remote host is running MSSQL, a database server from Microsoft. It is possible to extract the version number of the remote installation from the server pre-login response. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10144; scriptversion"1.63";...
Microsoft SQL Server Clr Stored Procedure Payload Execution
This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...
CVE-1999-1556
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value...
SQL Server 2019 RTM Cumulative Update (CU) 17 KB5016394
SQL Server 2019 RTM Cumulative Update CU 17 KB5016394...
Microsoft SQL Server 2012 SP2 Cumulative Update (CU) 14 KB3180914
Microsoft SQL Server 2012 SP2 Cumulative Update CU 14 KB3180914...
SQL Server 2017 RTM Cumulative Update (CU) 20 KB4541283
SQL Server 2017 RTM Cumulative Update CU 20 KB4541283...
Microsoft SQL Server 2012 SP2 Cumulative Update (CU) 12 KB3152637
Microsoft SQL Server 2012 SP2 Cumulative Update CU 12 KB3152637...
Microsoft SQL Server 2012 SP3 Cumulative Update (CU) 3 KB3152635
Microsoft SQL Server 2012 SP3 Cumulative Update CU 3 KB3152635...