[Full-disclosure] SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability

SEC Consult Security Advisory 20081209-0 ===================================================================================== title: Microsoft SQL Server 2000 spreplwritetovarbin limited memory overwrite vulnerability program: Microsoft SQL Server 2000 vulnerable version: =8.00.2039 homepage:...

MS09-004 Microsoft SQL Server sp_replwritetovarbin Memory Corruption

A heap-based buffer overflow can occur when calling the undocumented "spreplwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows Internal Database, and Microsoft Desktop Engine MSDE without the updates supplied in MS09-00...

MS09-004 Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection

A heap-based buffer overflow can occur when calling the undocumented "spreplwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows Internal Database, and Microsoft Desktop Engine MSDE without the updates supplied in MS09-00...

Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability

The host is running Microsoft SQL Server, which is prone to buffer-overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodmssqlserver2000activexbofvuln900125.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability Author...

Microsoft SQL Server 2000 sqlvdir.dll ActiveX Buffer Overflow Vulnerability

Microsoft SQL Server is prone to a buffer-overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

qshop-sqlxss.txt

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

MS08-069: Description of the security update for XML Core Services 6.0: November 11, 2008

None None...

ms-sql-info NSE Script

Attempts to determine configuration and version information for Microsoft SQL Server instances. SQL Server credentials required: No will not benefit from mssql.username & mssql.password. Run criteria: Host script: Will always run. Port script: N/A NOTE: Unlike previous versions, this script will...

MS Windows Token Kidnapping local provide the right solutions-vulnerability warning-the black bar safety net

Although it is a time ago of the vulnerability, but had been only concerned with the exploits, and not focus on specific solutions, today inadvertently and the user-chat when mentioned, the user let help to find a solution, the online search under, In The Lancet where to find the relevant...

DB Software Laboratory 'VImpX.ocx' ActiveX控件文件破坏漏洞

BUGTRAQ ID: 31907 CNCAN ID：CNCAN-2008102501 VImpX ActiveX控件允许跨表格或ODBC数据源将数据导入到Oracle、SQL Server或ODBC数据库中。 'VImpX.ocx' ActiveX控件存在多个安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令或破坏系统文件。 1，传递超长字符串超过256字节可触发缓冲区溢出。 2，"LogFile"方法没有检查用户提供的参数，提交恶意文件名，并在"ClearLogFile"函数调用时删除文件内容。 3，"SaveToFile"方法没有检查用户提供的参数，可导致目标文件被破坏。 ...

DorsaCms (ShowPage.aspx) Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Dorsa CMS Vendor : http://www.dorsacms.com Description : A CMS written by iranian programmers which uses by governmental websites. Vulnerable File : ShowPage.aspx Dork: Powered by DorsaCms...

Sybase SQL Blank Password

The remote Sybase SQL server has the default SPDX-FileCopyrightText: 2008 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 8 Update: rubygem-rails-2.1.1-2.fc8

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

Microsoft SQL Server 2000 Client Components ActiveX Control Buffer Overflow (CVE-2008-4110)

Microsoft SQL Server is a relational database management system RDBMS. A buffer overflow vulnerability has been reported in Microsoft SQL Server. The vulnerability is due to a boundary error in the Microsoft SQL Server 2000 Client Components ActiveX Control sqlvdir.dll when handling parameters...

MS SQL Server Elevation of Privilege Vulnerabilities (941203)

This host has Microsoft SQL Server, which is prone to Privilege Escalation Vulnerabilities. OpenVAS Vulnerability Test $Id: gbms08-040.nasl 5863 2017-04-05 07:38:11Z antu123 $ MS SQL Server Elevation of Privilege Vulnerabilities 941203 Authors: Veerendra GG Copyright: Copyright c 2008 Greenbone...

Microsoft SQL Server Elevation of Privilege Vulnerabilities (941203)

This host has Microsoft SQL Server, which is prone to Privilege Escalation Vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Mircosoft Windows Token Kidnapping本地提权漏洞

CNCAN ID：CNCAN-2008101007 Microsoft Windows是一款流行的操作系统。 漏洞是由于在NetworkService或LocalService上下文运行的代码，可以访问同样是在 NetworkService或LocalService上下文下运行的进程，部分进程允许提升特权到LocalSystem。 对于IIS，默认安装是不受影响的，以Full Trust运行的ASP.NET代码受此漏洞影响，如果权限低于Full Trust，也不受此漏洞影响。同样旧Asp代码不受此漏洞影响，只有ASP.NET才受影响。 针对SQL...

MS Windows Token Kidnapping local provide the right solutions-vulnerability warning-the black bar safety net

Today MS updated security Bulletin This vulnerability is due inNetworkService or LocalService the following code running, you can access the same in the NetworkService or LocalService processes that run under that certain processes allow elevation of privileges for theLocalSystem it. For IIS, the...