imPC@ndo IT

Tracker / CVE-2008-0106

CVE-2008-0106

High 9.0

Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.

Affected products and versions

microsoft data_engine
microsoft sql_server
microsoft sql_server_desktop_engine
microsoft sql_server_express_edition

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References