CVE-2008-0106 Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
HighCVSS 9.0
EPSS 35.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft data engine | = 1.0-sp4 | No fix listed |
| Microsoft sql server | = 7.0-sp4 | No fix listed |
| Microsoft sql server | = 2000-sp4 | No fix listed |
| Microsoft sql server | = 2005-sp2 | No fix listed |
| Microsoft sql server desktop engine | = 2000-sp4 | No fix listed |
| Microsoft sql server express edition | = 2005-sp2 | No fix listed |
References
- 30970 third-party-advisory
- 20080708 Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability mailing-list
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- 1020441 vdb-entry
- TA08-190A third-party-advisory us-government-resource
- www.vmware.com
- www.vmware.com
- ADV-2008-2022 vdb-entry
- MS08-040 vendor-advisory
- oval:org.mitre.oval:def:13785 signature vdb-entry