CVE-2004-1560 Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
MediumCVSS 5.0
EPSS 25.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft sql server | = 7.0 | No fix listed |
| Microsoft sql server | = 7.0-sp1 | No fix listed |
| Microsoft sql server | = 7.0-sp2 | No fix listed |
| Microsoft sql server | = 7.0-sp3 | No fix listed |
| Microsoft sql server | = 7.0-sp4 | No fix listed |
References
- 20040928 MSSQL 7.0 DoS mailing-list
- packetstormsecurity.nl exploit
- 12680 third-party-advisory vendor-advisory
- 1011434 exploit vdb-entry
- 11265 exploit vdb-entry
- mssql-data-buffer-dos(17542) vdb-entry