Microsoft SQL Server 2000 Microsoft Jet 4.0 Engine - Unicode Buffer Overflow (PoC)

Microsoft SQL Server 2000 Microsoft Jet 4.0 Engine - Unicode Buffer Overflow PoC source: https://www.securityfocus.com/bid/5057/info Microsoft SQL Server is prone to a remotely exploitable unicode-based buffer overflow condition. This condition occurs when the OpenDataSource function is used with...

Microsoft SQL Server 2000 pwdencrypt() buffer overflow

Microsoft SQL Server 2000 up to SP2 suffers from buffer/heap overflow in built-in hashing function pwdencrypt. Sample code shown below crashes SQL Server service and may lead to arbitrary code execution: SELECT pwdencryptREPLICATE'A',353 On some systems it may require lager amount of characters t...

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow source: https://www.securityfocus.com/bid/5014/info A buffer overflow vulnerability has been reported in SQL Server 2000. The vunerability is a result of an unchecked buffer when using the password encrypt procedure. This...

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow

source: https://www.securityfocus.com/bid/5014/info A buffer overflow vulnerability has been reported in SQL Server 2000. The vunerability is a result of an unchecked buffer when using the password encrypt procedure. This procedure is used by administrators to provides support for the storage of...

Microsoft SQL Server 2000 - SQLXML Script Injection

Microsoft SQL Server 2000 - SQLXML Script Injection source: https://www.securityfocus.com/bid/5005/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various method...

Microsoft SQL Server 2000 - SQLXML Buffer Overflow (PoC)

Microsoft SQL Server 2000 - SQLXML Buffer Overflow PoC source: https://www.securityfocus.com/bid/5004/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various...

Microsoft SQL Server 2000 - 'SQLXML' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/5004/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various methods of communication, one of which is via HTTP. SQLXML...

Microsoft SQL Server 2000 - SQLXML Script Injection

source: https://www.securityfocus.com/bid/5005/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various methods of communication, one of which is via HTTP. SQLXML...

Many, many, many Sql Server 7 & 2000 Buffer Overflows

Security Advisory Name : Many, many, many Sql Server 7 & 2000 Buffer Overflows System Affected : Sql Server 7 & 2000 all service packs and fixes. Severity : High. Remote Exploit: Yes Author: Cesar Cerrudo. Date: 03/12/2002 Advisory Number: CC030203 Description : Well people it's the same old...

CVE-2001-0879

CVE-2001-0879 describes a format-string vulnerability in the C runtime functions used by Microsoft SQL Server 7.0 and 2000. The underlying issue is a format string handling flaw in the C runtime, which can allow an attacker to trigger a denial of service. The available connected documents confirm...

CVE-2001-0546

The CVE-2001-0546 issue affects Microsoft Internet Security and Acceleration (ISA) Server 2000, specifically the H.323 Gatekeeper Service. A memory leak is triggered by large amounts of malformed H.323 data, allowing remote attackers to exhaust memory and cause a denial of service (resource exhau...

CVE-2001-0547

CVE-2001-0547 describes a memory leak in the proxy service of Microsoft Internet Security and Acceleration (ISA) Server 2000 that allows local attackers to cause a denial of service through resource exhaustion. The affected product is ISA Server 2000 (proxy service component); the underlying caus...

CVE-2002-0056

CVE-2002-0056 concerns Microsoft SQL Server 7.0 and 2000, where a buffer overflow is triggered by a long OLE DB provider name used with OpenDataSource or OpenRowset in an ad hoc connection. The resulting issue can allow an attacker to execute arbitrary code with the SQL Server service account’s p...

CVE-2001-0542

CVE-2001-0542 describes buffer/format-string vulnerabilities in Microsoft SQL Server 7.0 and 2000. The issues affect the built-in formatting functions raiserror, formatmessage, and xp_sprintf, allowing an attacker with SQL Server access to execute arbitrary code or potentially cause a denial of s...

CVE-2001-1533

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

PT-2001-2618 · Microsoft · Internet Security/Acceleration (Isa) Server 2000

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Security and Acceleration ISA Server 2000 Description: The issue allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. The vendor disputes this issue, stating that it requires high...

CVE-2001-0879

Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 2 source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...

CVE-2001-0547

Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...

CVE-2001-0344

CVE-2001-0344 describes a privilege-escalation vulnerability in Microsoft SQL Server 2000 Gold and SQL Server 7.0 when running in Mixed Mode. An attacker with local database access could exploit reusing a cached sa administrator connection to gain privileges. The Initial Description states the vu...