Summary
| Detail | |||
|---|---|---|---|
| Vendor | Microsoft | First view | 2008-07-08 |
| Product | Sql Server | Last view | 2008-07-08 |
| Version | 2005 | Type | Application |
| Update | sp1 | ||
| Edition | express | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | * | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:a:microsoft:sql_server | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 9 | 2008-07-08 | CVE-2008-0107 | Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka "SQL Server Memory Corruption Vulnerability." |
| 5 | 2008-07-08 | CVE-2008-0085 | SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 50% (1) | CWE-200 | Information Exposure |
| 50% (1) | CWE-189 | Numeric Errors |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 46773 | Microsoft SQL Server Memory Page Reuse Information Disclosure |
| 46771 | Microsoft SQL Server Stored Backup File Processing Memory Corruption Arbitrar... |
OpenVAS Exploits
| id | Description |
|---|---|
| 2012-03-16 | Name : VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCe... File : nvt/gb_VMSA-2011-0003.nasl |
| 2008-10-14 | Name : MS SQL Server Elevation of Privilege Vulnerabilities (941203) File : nvt/gb_ms08-040.nasl |
Information Assurance Vulnerability Management (IAVM)
| id | Description |
|---|---|
| 2011-A-0066 | Multiple Vulnerabilities in VMware Products Severity: Category I - VMSKEY: V0027158 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft SQL server MTF file download RuleID : 13896 - Type : SERVER-MSSQL - Revision : 14 |
| 2014-01-10 | Microsoft SQL Server Backup Database File integer overflow attempt RuleID : 13890 - Type : FILE-OTHER - Revision : 13 |
| 2014-01-10 | Microsoft SQL Server Backup Database File integer overflow attempt RuleID : 13889 - Type : FILE-OTHER - Revision : 13 |
| 2014-01-10 | Microsoft SQL Server Backup Database File integer overflow attempt RuleID : 13888 - Type : FILE-OTHER - Revision : 13 |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2016-03-04 | Name: The remote VMware ESX / ESXi host is missing a security-related patch. File: vmware_VMSA-2011-0003_remote.nasl - Type: ACT_GATHER_INFO |
| 2011-02-14 | Name: The remote VMware ESXi / ESX host is missing one or more security-related pat... File: vmware_VMSA-2011-0003.nasl - Type: ACT_GATHER_INFO |
| 2008-09-29 | Name: The remote SQL server is affected by multiple vulnerabilities. File: smb_kb941203.nasl - Type: ACT_GATHER_INFO |
| 2008-07-08 | Name: The remote Microsoft SQL Server install is vulnerable to memory corruption fl... File: smb_nt_ms08-040.nasl - Type: ACT_GATHER_INFO |
