Microsoft SQL Server MS02-039 patch
| mssql-ms02039-patch (9666) |  High Risk |
Description:
Microsoft SQL Server 2000 is vulnerable to multiple vulnerabilities, which are addressed in the patch released with Microsoft Security Bulletin MS02-039. The most serious of these vulnerabilities would allow a remote attacker to execute code on the system.
Platforms Affected:
- Microsoft, SQL Server 2000
- Microsoft, Windows 2000
- Microsoft, Windows 2003 Server
- Microsoft, Windows NT 4.0
Remedy:
Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS02-039. See References.
Consequences:
Informational
References:
- CERT Advisory CA-2002-22, Multiple Vulnerabilities in Microsoft SQL Server at http://www.cert.org/advisories/CA-2002-22.html.
- IBM Internet Security Systems X-Force Database, Microsoft SQL Server Resolution Service keep-alive function denial of service at http://xforce.iss.net/xforce/xfdb/9662.
- IBM Internet Security Systems X-Force Database, Microsoft SQL Server Resolution Service buffer overflows at http://xforce.iss.net/xforce/xfdb/9661.
- Microsoft Security Bulletin MS02-039, Buffer Overruns in SQL Server 2000 Resolution Service Could Enable Code Execution (Q323875) at http://www.microsoft.com/technet/security/bulletin/ms02-039.mspx.
- NGSSoftware Insight Security Research Advisory #NISR25072002, Unauthenticated Remote Compromise in MS SQL Server 2000 at http://www.nextgenss.com/advisories/mssql-udp.txt.
- CVE-2002-0649: Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
- CVE-2002-0650: The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a ping style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.
Reported:
Not available
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net