Signature Detail
Short Name |
DB:MS-SQL:TDI-OVERFLOW |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
DB |
Keywords |
MS-SQL TDI Packet Overflow |
Release Date |
2004/09/30 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DB: MS-SQL TDI Packet Overflow
This signature detects an exploit attempt against a TDI Packet overflow vulnerability in MSSQL. An attacker could cause the MSSQL server to crash, resulting in a denial of service.
Extended Description
Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An attacker may leverage this issue to cause the affected server to crash, denying service to legitimate users.
Affected Products
- Microsoft SQL Server 7.0
- Microsoft SQL Server 7.0 SP1
- Microsoft SQL Server 7.0 SP2
- Microsoft SQL Server 7.0 SP3
- Microsoft SQL Server 7.0 SP4
References
- BugTraq: 11265
- CVE: CVE-2004-1560
- URL: http://securitytracker.com/id?1011434
- URL: http://www.securityfocus.com/bid/11265