1390 matches found
CVE-2000-0202
Microsoft SQL Server 7.0 and Microsoft Data Engine MSDE 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query...
CVE-2000-0202
Microsoft SQL Server 7.0 and Microsoft Data Engine MSDE 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query...
MS99-059: Microsoft SQL Server Crafted TCP Packet Remote DoS (uncredentialed check)
The remote Microsoft SQL server can be shut down when it is sent a TCP packet containing more than 2 NULLs. An attacker may use this problem to prevent it from being used by legitimate clients, thus threatening your business. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Microsoft SQL Server 7.0/7.0 SP1 - NULL Data Denial of Service
// source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception EXCEPTIONACCESS VIOLATION". / sqldos.c -- a DoS attack agains MS...
Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service
Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service // source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception...
Microsoft SQL Server TCP/IP Listener Detection
The remote host is running MSSQL, a database server from Microsoft. It is possible to extract the version number of the remote installation from the server pre-login response. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10144; scriptversion"1.63";...
Microsoft SQL Server Clr Stored Procedure Payload Execution
This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...
CVE-1999-1556
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value...
Microsoft SQL Server 2012 SP2 Cumulative Update (CU) 14 KB3180914
Microsoft SQL Server 2012 SP2 Cumulative Update CU 14 KB3180914...
SQL Server 2017 RTM Cumulative Update (CU) 20 KB4541283
SQL Server 2017 RTM Cumulative Update CU 20 KB4541283...
SQL Server 2019 RTM Cumulative Update (CU) 17 KB5016394
SQL Server 2019 RTM Cumulative Update CU 17 KB5016394...
Microsoft SQL Server 2012 SP2 Cumulative Update (CU) 12 KB3152637
Microsoft SQL Server 2012 SP2 Cumulative Update CU 12 KB3152637...
Microsoft SQL Server 2012 SP3 Cumulative Update (CU) 3 KB3152635
Microsoft SQL Server 2012 SP3 Cumulative Update CU 3 KB3152635...
SQL Server 2019 RTM Cumulative Update (CU) 6 KB4563110
SQL Server 2019 RTM Cumulative Update CU 6 KB4563110...
SQL Server 2019 RTM Cumulative Update (CU) 25 KB5033688
SQL Server 2019 RTM Cumulative Update CU 25 KB5033688...
Microsoft SQL Server 2012 SP2 Cumulative Update (CU) 11 KB3137745
Microsoft SQL Server 2012 SP2 Cumulative Update CU 11 KB3137745...
Microsoft SQL Server 2012 SP3 Cumulative Update (CU) 1 KB3123299
Microsoft SQL Server 2012 SP3 Cumulative Update CU 1 KB3123299...
Microsoft SQL Server 2012 SP3 Cumulative Update (CU) 2 KB3137746
Microsoft SQL Server 2012 SP3 Cumulative Update CU 2 KB3137746...