Short Name |
DB:MS-SQL:XP-DIRTREE1 |
---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
MS-SQL Server 7 xp_dirtree Buffer Overflow |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects attempts to exploit a known vulnerability against Microsoft SQL Server. SQL Server 7.00.1021 is vulnerable. Attackers can send a long Unicode string to the xp_dirtree extended procedure in the SQL Server to overflow the buffer and execute arbitrary code.
Successful exploitation of the vulnerability could allow execution of arbitrary code with the privileges of the SQL Server process and gain unauthorized access to a system.