CVE-2008-0106

Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement...

CVE-2008-0085

CVE-2008-0085 describes a memory handling flaw in multiple SQL Server products (SQL Server 7.0, 2000, 2005 and related Desktop Engine variants) where memory pages are not initialized during reallocations, enabling a potential disclosure of sensitive data via memory-page reuse. Connected Microsoft...

CVE-2008-0107

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 allows remote authenticated users to execute arbitrary code...

CVE-2008-0085

SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 does not initialize memory pages when reallocating memory, which allows database...

Microsoft SQL Server On-Disk MTF Data Structures Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code in the context of the server. Failed attacks will likely caus...

CVE-2008-0106: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement...

Microsoft SQL Server Memory Page Reuse Information Disclosure Vulnerability

Description Microsoft SQL Server is prone to an information-disclosure vulnerability caused by a memory-reallocation flaw. An attacker with operator access may leverage this issue to obtain potentially sensitive information that could aid in further attacks. Technologies Affected Microsoft Data...

CVE-2008-0086: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine MSDE 2000 SP4, and 2000 Desktop Engine WMSDE allows remote authenticated users to execute arbitrary code via a crafted SQL expression...

CVE-2008-0085: Exposure of Sensitive Information to an Unauthorized Actor

SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 does not initialize memory pages when reallocating memory, which allows database...

Microsoft SQL Server Convert Function Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code and completely compromise affected computers. Failed attacks...

Microsoft SQL Server INSERT Statement Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code and completely compromise affected computers. Failed attacks...

MS08-040: Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203)

The remote host is running a version of Microsoft SQL Server, Desktop Engine or Internal Database that is vulnerable to multiple memory corruption issues. These vulnerabilities may allow an attacker to gain elevates privileges on the server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2008-0107: Undefined Security Weakness

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 allows remote authenticated users to execute arbitrary code...

DUcalendar 1.0 - iEve SQL Injection

DUcalendar 1.0 - iEve SQL Injection DUcalendar v 1.0 detail.asp?iEve= Remote SQL Inection Exploit + Script : DUcalendar + Version : 1.0 Maybe others + Exploit : Remote SQL Injection + Script URL : http://www.codedworld.com/download/ducalendar-/545.html + Description : 'Free Event Calendar written...

DUcalendar 1.0 (detail.asp iEve) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== DUcalendar 1.0 detail.asp iEve Remote SQL Injection Vulnerability =================================================================== DUcalendar v 1.0 detail.asp?iEve=...

[SECURITY] Fedora 9 Update: gallery2-2.2.5-1.fc9

The base Gallery 2 installation - the equivalent of upstream's -minimal package. This package requires a database to be operational. Acceptable database backends include MySQL v 3.x, MySQL v 4.x, PostgreSQL v 7.x, PostgreSQL v 8.x, Oracle 9i, Oracle 10g, DB2, and MS SQL Server. All given package...

[SECURITY] Fedora 8 Update: gallery2-2.2.5-1.fc8

The base Gallery 2 installation - the equivalent of upstream's -minimal package. This package requires a database to be operational. Acceptable database backends include MySQL v 3.x, MySQL v 4.x, PostgreSQL v 7.x, PostgreSQL v 8.x, Oracle 9i, Oracle 10g, DB2, and MS SQL Server. All given package...

jiro-sql.txt

Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management System is an essential element for...

JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability

No description provided by source. + Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management...

JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= JiRo's FAQ Manager read.asp fID SQL Injection Vulnerability ============================================================= + Script Name : JiRo?s FAQ Manager eXperience + Version...