oval:org.mitre.oval:def:15395

Definition Id: oval:org.mitre.oval:def:15395

Oval ID:	oval:org.mitre.oval:def:15395
Title:	Reflected XSS Vulnerability - MS12-070
Description:	Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected XSS Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2552	Version:	10
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2000 Reporting Services Microsoft SQL Server 2005 Microsoft SQL Server 2008 Microsoft SQL Server 2008 R2 Microsoft SQL Server 2012
Definition Synopsis:
SQL Reporting Services exist Check for vulnerable SQL Check for vulnerable SQL 2000 Reporting Services Microsoft SQL Server 2000 Reporting Services SP2 is installed AND Check if version of Reportingservicesservice.exe is less than 8.0.1077.0 AND Check if version of Reportingservicesservice.exe is greater than or equal to 8.0.1038.0 OR Check for vulnerable SQL Server 2005 SP4 and file version Check for vulnerable SQL Server 2005 SP4 Check for vulnerable SQL Server 2005 SP4 GDR Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 9.0.5000.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 9.0.5069.0 OR Check for vulnerable SQL Server 2005 SP4 QFE Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 9.0.5200.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 9.0.5324.0 AND Microsoft SQL Server 2005 SP4 is installed OR Check for vulnerable SQL Server 2008 SP2 and file version Check for vulnerable SQL Server 2008 SP2 Check for vulnerable SQL Server 2008 SP2 GDR Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 10.0.4000.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 10.0.4067.0 OR Check for vulnerable SQL Server 2008 SP2 QFE Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 10.0.4260.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 10.0.4371.0 AND Microsoft SQL Server 2008 SP2 is installed OR Check for vulnerable SQL Server 2008 SP3 and file version Check for vulnerable SQL Server 2008 SP3 Check for vulnerable SQL Server 2008 SP3 GDR Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 10.0.5500.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 10.0.5512.0 OR Check for vulnerable SQL Server 2008 SP3 QFE Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 10.0.5750.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 10.0.5826.0 AND Microsoft SQL Server 2008 SP3 is installed OR Check for vulnerable SQL Server 2008 R2 SP1 and file version Check for vulnerable SQL Server 2008 R2 SP1 Check for vulnerable SQL Server 2008 R2 SP1 GDR Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 10.50.2500.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 10.50.2550.0 OR Check for vulnerable SQL Server 2008 R2 SP1 QFE Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 10.50.2750.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 10.50.2861.0 AND Microsoft SQL Server 2008 R2 SP1 is installed OR Check for vulnerable SQL Server 2012 and file version Check for vulnerable SQL Server 2012 Check for vulnerable SQL Server 2012 GDR Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 11.0.2100.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 11.0.2218.0 OR Check for vulnerable SQL Server 2012 QFE Check if version of microsoft.reportingservices.diagnostics.dll is greater than or equal to 11.0.2300.0 AND Check if version of microsoft.reportingservices.diagnostics.dll is less than 11.0.2376.0 AND Microsoft SQL Server 2012 is installed

Definition Id: oval:org.mitre.oval:def:15044

Oval ID:	oval:org.mitre.oval:def:15044
Title:	Microsoft SQL Server 2012 is installed
Description:	Microsoft SQL Server 2012 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2012	Version:	15
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista	Product(s):	Microsoft SQL Server 2012
Definition Synopsis:
SQL Server instances with version greater than 11.0.0.0 and less than 12.0.0.0 exist
Referenced By:
oval:org.mitre.oval:def:15395

Definition Id: oval:org.mitre.oval:def:12454

Oval ID:	oval:org.mitre.oval:def:12454
Title:	Microsoft SQL Server 2008 is installed
Description:	Microsoft SQL Server 2008 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008	Version:	19
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2008
Definition Synopsis:
SQL Server Integration Services version between 10.0.0.0 and 10.50.1600.1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\Version is greater than 10.0.0.0 AND HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\Version is less than 10.50.1600.1 AND SQL Server instance with version between 10.0.0.0 and 10.50.1600.1 SQL Server instances with version greater than 10.0.0.0 exist AND SQL Server instances with version less than 10.50.1600.1 exist
Referenced By:
oval:org.mitre.oval:def:15497

Definition Id: oval:org.mitre.oval:def:12596

Oval ID:	oval:org.mitre.oval:def:12596
Title:	Microsoft SQL Server 2008 R2 is installed
Description:	Microsoft SQL Server 2008 R2 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008:r2	Version:	11
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2008 R2
Definition Synopsis:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\DTS\Setup\\Version is greater than or equal to 10.50.1600.1 AND SQL Server instance with version between 10.50.1600.1 and 11.0.0.0 SQL Server instances with version greater than or equal to 10.50.1600.1 exist AND SQL Server instances with version less than 11.0.0.0 exist
Referenced By:
oval:org.mitre.oval:def:15808

Definition Id: oval:org.mitre.oval:def:15497

Oval ID:	oval:org.mitre.oval:def:15497
Title:	Microsoft SQL Server 2008 SP3 is installed
Description:	Microsoft SQL Server 2008 SP3 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008:sp3	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2008
Definition Synopsis:
Microsoft SQL Server 2008 is installed AND Check if SQL Server 2008 SP3 is installed
Referenced By:
oval:org.mitre.oval:def:15395

Definition Id: oval:org.mitre.oval:def:15808

Oval ID:	oval:org.mitre.oval:def:15808
Title:	Microsoft SQL Server 2008 R2 SP1 is installed
Description:	Microsoft SQL Server 2008 R2 SP1 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008_r2:sp1	Version:	7
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2008 R2
Definition Synopsis:
Microsoft SQL Server 2008 R2 is installed AND Check if SQL Server instances with version less than 10.50.4000.0 and greater than or equal to 10.50.2500.0
Referenced By:
oval:org.mitre.oval:def:15395

Definition Id: oval:org.mitre.oval:def:12310

Oval ID:	oval:org.mitre.oval:def:12310
Title:	Microsoft SQL Server 2008 SP2 is installed
Description:	Microsoft SQL Server 2008 SP2 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2008:sp2	Version:	15
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft SQL Server 2008
Definition Synopsis:
MS SQL Server 2008 SP2 is installed
Referenced By:
oval:org.mitre.oval:def:15395

Definition Id: oval:org.mitre.oval:def:12442

Oval ID:	oval:org.mitre.oval:def:12442
Title:	Microsoft SQL Server 2005 SP4 is installed
Description:	Microsoft SQL Server 2005 SP4 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server:2005:sp4	Version:	15
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft SQL Server 2005
Definition Synopsis:
MS SQL Server 2005 SP4 is installed
Referenced By:
oval:org.mitre.oval:def:15395

Definition Id: oval:org.mitre.oval:def:15635

Oval ID:	oval:org.mitre.oval:def:15635
Title:	Microsoft SQL Server 2000 Reporting Services SP2 is installed
Description:	Microsoft SQL Server 2000 Reporting Services SP2 is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server_reporting_services:2000:sp2	Version:	3
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2000 Reporting Services
Definition Synopsis:
Microsoft SQL Server 2000 Reporting Services is installed AND Check if Service Pack 2 is installed for Microsoft SQL server 2000 Reporting Services
Referenced By:
oval:org.mitre.oval:def:15395

Definition Id: oval:org.mitre.oval:def:15161

Oval ID:	oval:org.mitre.oval:def:15161
Title:	Microsoft SQL Server 2000 Reporting Services is installed
Description:	Microsoft SQL Server 2000 Reporting Services is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:sql_server_reporting_services:2000	Version:	3
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Microsoft SQL Server 2000 Reporting Services
Definition Synopsis:
Check of SQL Server 2000 Reporting Services is installed
Referenced By:
oval:org.mitre.oval:def:15635

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0559s

Facebook rss twitter linkedin mail