DB: MS-SQL Server 7 xp_dirtree Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Microsoft SQL Server. SQL Server 7.00.1021 is vulnerable. Attackers can send a long Unicode string to the xp_dirtree extended procedure in the SQL Server to overflow the buffer and execute arbitrary code.

Extended Description

Successful exploitation of the vulnerability could allow execution of arbitrary code with the privileges of the SQL Server process and gain unauthorized access to a system.

References

URL: http://securityvulns.com/docs2588.html

Short Name

DB:MS-SQL:XP-DIRTREE1

Severity

Major

Recommended

False

Recommended Action

Drop

DB: MS-SQL Server 7 xp_dirtree Buffer Overflow

Extended Description

References

Found a potential security threat?