EUVD-2003-0030

Malware in sbrugna...

CVE-2003-0030

Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature SEF before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures 1 xpptycheckusers, 2 xpptyinsert, or 3 xpptyselect...

CVE-2003-0030

Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature SEF before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures 1 xpptycheckusers, 2 xpptyinsert, or 3 xpptyselect...

CVE-2003-0030

The CVE-2003-0030 issue affects Protegrity Secure.Data for Microsoft SQL Server 2000, where buffer overflows in protegrity.dll (SEF) enable arbitrary code execution via extended stored procedures xp_pty_checkusers, xp_pty_insert, and xp_pty_select. Affected versions include SEF prior to 2.2.3.9; ...

Protegrity Secure.Data buffer overflow

Buffer overflows in Extended stored procedures...

Protegrity buffer overflow

Additional details can be found at http://www.kb.cert.org/vuls/id/247545 There is a company that does encryption of databases called Protegrty. They use extended stored procedures to do the encryption and decryption. I tested 3 of the extended stored procedures and found all 3 vulnerable to buffe...