5291 matches found
MS99-059: Microsoft SQL Server Crafted TCP Packet Remote DoS (uncredentialed check)
The remote Microsoft SQL server can be shut down when it is sent a TCP packet containing more than 2 NULLs. An attacker may use this problem to prevent it from being used by legitimate clients, thus threatening your business. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Microsoft SQL Server 7.0/7.0 SP1 - NULL Data Denial of Service
// source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception EXCEPTIONACCESS VIOLATION". / sqldos.c -- a DoS attack agains MS...
Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service
Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service // source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception...
Microsoft SQL Server TCP/IP Listener Detection
The remote host is running MSSQL, a database server from Microsoft. It is possible to extract the version number of the remote installation from the server pre-login response. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10144; scriptversion"1.63";...
ms.sql.enterprise.manager.txt
Date: Thu, 4 Mar 1999 19:52:15 -0500 From: [email protected] To: [email protected] I've come across an issue regarding Microsoft SQL Server 6.0 and 6.5. SQL Server has a management tool called SQL Explorer used to manage the server. If your SQL Server is set to use normal...
Microsoft SQL Server Clr Stored Procedure Payload Execution
This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...
CVE-1999-1556
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value...
SQL Server 2019 RTM Cumulative Update (CU) 2 KB4536075
SQL Server 2019 RTM Cumulative Update CU 2 KB4536075...
SQL Server 2017 RTM Cumulative Update (CU) 28 KB5008084
SQL Server 2017 RTM Cumulative Update CU 28 KB5008084...
SQL Server 2017 RTM Cumulative Update (CU) 15 KB4498951
SQL Server 2017 RTM Cumulative Update CU 15 KB4498951...
Microsoft SQL Server 2012 SP2 Cumulative Update (CU) 14 KB3180914
Microsoft SQL Server 2012 SP2 Cumulative Update CU 14 KB3180914...
SQL Server 2017 RTM Cumulative Update (CU) 3 KB4052987
SQL Server 2017 RTM Cumulative Update CU 3 KB4052987...
SQL Server 2019 RTM Cumulative Update (CU) 15 KB5008996
SQL Server 2019 RTM Cumulative Update CU 15 KB5008996...
SQL Server 2014 Service Pack 1 Cumulative Update (CU) 10 KB3204399
SQL Server 2014 Service Pack 1 Cumulative Update CU 10 KB3204399...
SQL Server 2017 RTM Cumulative Update (CU) 20 KB4541283
SQL Server 2017 RTM Cumulative Update CU 20 KB4541283...
SQL Server 2022 RTM Cumulative Update (CU) 24 KB5080999
SQL Server 2022 RTM Cumulative Update CU 24 KB5080999...
SQL Server 2022 RTM Cumulative Update (CU) 25 KB5081477
SQL Server 2022 RTM Cumulative Update CU 25 KB5081477...
SQL Server 2019 RTM Cumulative Update (CU) 14 KB5007182
SQL Server 2019 RTM Cumulative Update CU 14 KB5007182...