DB: MS-SQL SP_START_JOB Program Execution
This signature detects attempts to use the sp_start_job command on a Microsoft SQL Server 2000 database. A successful attack can allow the attackers to execute arbitrary code.
Extended Description
Microsoft SQL Server 2000 uses an Agent which is responsible for restarting the SQL Server service, replication, and running scheduled jobs. Some of the jobs that the Agent executes have weak permissions, which could allow a user with low permissions to perform actions on the database in the context of the SQL Server Service Account when used in conjunction with the Microsoft SQL Server Extended Stored Procedure Privilege Elevation Vulnerability (BID 5481).
Affected Products
Microsoft sql_server
Short Name
DB:MS-SQL:2000-SP_START_JOB
Severity
Major
Recommended
False
Recommended Action
None
Category
DB
Keywords
CVE-2002-1138 Execution MS-SQL Program SP_START_JOB bid:5483
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
Microsoft
CVSS Score
7.5