Signature Detail
Short Name |
DB:MS-SQL:XP-DIRTREE1 |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
SQL Microsoft database extended procedure |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DB: MS-SQL Server 7 xp_dirtree Buffer Overflow
This signature detects attempts to exploit a known vulnerability against Microsoft SQL Server. SQL Server 7.00.1021 is vulnerable. Attackers can send a long Unicode string to the xp_dirtree extended procedure in the SQL Server to overflow the buffer and execute arbitrary code.
Extended Description
Successful exploitation of the vulnerability could allow execution of arbitrary code with the privileges of the SQL Server process and gain unauthorized access to a system.
References