Microsoft SQL Server 2000 sp_replwritetovarbin privilege escalation updated since 09.12.2008
Published:		11.12.2008
Source:		FULL-DISCLOSURE
SecurityVulns ID:		9489
Type:		local
Level:		6/10
Description:		It's possible to overwrite process internal data and execute code in server context.

Affected:		MICROSOFT : SQL Server 2000
		MICROSOFT : SQL Server 2005

Original document		Daniel Fabian, Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209) (11.12.2008)
		Daniel Fabian, [Full-disclosure] SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability (09.12.2008)

Discuss:

Read or add your comments to this news (0 comments)