NVD

Id
5189  
Name
CVE-2008-5416  
Description
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-5416  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
32645 5189 CVE-2008-5416 20081210 Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209)  View
32646 5189 CVE-2008-5416 oval:org.mitre.oval:def:6217  View
32647 5189 CVE-2008-5416 4706  View
32648 5189 CVE-2008-5416 1021363  View
32649 5189 CVE-2008-5416 1021490  View
32650 5189 CVE-2008-5416 http://support.avaya.com/elmodocs2/security/ASA-2009-055.htm  View
32651 5189 CVE-2008-5416 VU#696644  View
32652 5189 CVE-2008-5416 http://www.microsoft.com/technet/security/advisory/961040.mspx  View
32653 5189 CVE-2008-5416 MS09-004  View
32654 5189 CVE-2008-5416 7501  View
32655 5189 CVE-2008-5416 http://www.sec-consult.com/files/20081209_mssql-2000-sp_replwritetovarbin_memwrite.txt  View
32656 5189 CVE-2008-5416 20081209 SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability  View
32657 5189 CVE-2008-5416 20081210 Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite(update to SEC Consult SA-20081209)  View
32658 5189 CVE-2008-5416 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
32659 5189 CVE-2008-5416 32710  View
32660 5189 CVE-2008-5416 TA09-041A  View
32661 5189 CVE-2008-5416 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
32662 5189 CVE-2008-5416 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
32663 5189 CVE-2008-5416 ADV-2008-3380  View
32664 5189 CVE-2008-5416 mssql-spreplwritetovarbin-bo(47182)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46943 JVNDB-2008-002253 Microsoft SQL Server の sp_replwritetovarbin 拡張ストアド プロシージャの処理における脆弱性 Microsoft SQL Server の sp_replwritetovarbin 拡張ストアド プロシージャのパラメータ処理に脆弱性が存在します。結果として、任意のコードを実行される可能性があります。 CVE-2008-5416 35529 CVE-2008-5416 5189 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002253.html 2008-12-25 2011-03-04 View