vendor:
SQL Server
by:
Dave Aitel
7.5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: SQL Server
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: CVE-2000-0402
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2002
Microsoft SQL Server Hello Overflow
It is possible for an attacker to cause a buffer overflow condition on the vulnerable SQL server with a malformed login request. This may allow a remote attacker to execute arbitrary code as the SQL Server process.
Mitigation:
Disable this service (Microsoft SQL Server)