CVE-2008-5416 Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 De...
HighCVSS 9.0
EPSS 87.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft sql server | = 2000 | No fix listed |
| Microsoft sql server | = 2005 | No fix listed |
References
- 20081210 Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209) mailing-list
- 50917 vdb-entry
- 33034 third-party-advisory vendor-advisory
- 4706 third-party-advisory
- 1021363 vdb-entry
- 1021490 vdb-entry
- support.avaya.com
- VU#696644 third-party-advisory us-government-resource
- www.microsoft.com
- www.sec-consult.com exploit
- 20081209 SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability mailing-list
- 20081210 Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite(update to SEC Consult SA-20081209) mailing-list
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- 32710 exploit vdb-entry
- TA09-041A third-party-advisory us-government-resource
- www.vmware.com
- www.vmware.com
- ADV-2008-3380 vdb-entry
- MS09-004 vendor-advisory
- mssql-spreplwritetovarbin-bo(47182) vdb-entry
- oval:org.mitre.oval:def:6217 signature vdb-entry
- 7501 exploit