| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Microsoft Security Bulletin MS02-007: SQL Server Remote Data Source Function Contain Unchecked Buffers | |
|
||
| Time: 13:01 EST/18:01 GMT | News Source: Microsoft TechNet Security | Posted By: Robert Stein | ||
|
One of the features of Structured Query Language (SQL) in SQL Server 7.0 and 2000 is the ability to connect to remote data sources. One capability of this feature is the ability to use “ad hoc” connections to connect to remote data sources without setting up a linked server for less-often used data-sources. This is made possible through the use of OLE DB providers, which are low-level data source providers. This capability is made possible by invoking the OLE DB provider directly by name in a query to connect to the remote data source. An unchecked buffer exists in the handling of OLE DB provider names in ad hoc connections. A buffer overrun could occur as a result and could be used to either cause the SQL Server service to fail, or to cause code to run in the security context of the SQL Server. SQL Server can be configured to run in various security contexts, and by default runs as a domain user. The precise privileges the attacker could gain would depend on the specific security context that the service runs in. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 311 Last | Next |
The time now is
8:12:08 AM
ET.
Any comment problems? E-mail us |
| #1 By 2 (24.54.153.167) at 2/21/2002 1:48:43 PM |
| This provides additional information. |
| #2 By 135 (208.50.201.48) at 2/21/2002 10:43:32 PM |
|
There were just another 3 security bulletins released. 8, 9 and 10 which I believe fix the bugs RMD was whining about. :)
|
| #3 By 1642 (172.137.191.220) at 2/21/2002 11:00:53 PM |
|
Soda,
You are always up on keeping count. Since MS is up to #10, what is RedHat now up to? I am willing to guess that their number is still greater. Thanks |
| #4 By 135 (208.50.201.48) at 2/21/2002 11:36:11 PM |
| I think Redhat is up to 15 now. Haven't looked, but they released a vulnerability in ncurses just this past week. So yeah, they're still in the lead. |
| #5 By 2 (24.54.153.167) at 2/24/2002 5:33:55 PM |
| Soda's security digest... |
|
Write Comment
Return to News |
Displaying 1 through 25 of 311 Last | Next |
The time now is
8:12:08 AM
ET.
Any comment problems? E-mail us |
