Microsoft Security Advisory (961040)

ronjor · Dec 22, 2008

Published: December 22, 2008

Microsoft is investigating new public reports of a vulnerability that could allow remote code execution on systems with supported editions of Microsoft SQL Server 2000, Microsoft SQL Server 2005, Microsoft SQL Server 2005 Express Edition, Microsoft SQL Server 2000 Desktop Engine (MSDE 2000), Microsoft SQL Server 2000 Desktop Engine (WMSDE), and Windows Internal Database (WYukon). Systems with Microsoft SQL Server 7.0 Service Pack 4, Microsoft SQL Server 2005 Service Pack 3, and Microsoft SQL Server 2008 are not affected by this issue.

Microsoft is aware that exploit code has been published on the Internet for the vulnerability addressed by this advisory. Our investigation of this exploit code has verified that it does not affect systems that have had the workarounds listed below applied. Currently, Microsoft is not aware of active attacks that use this exploit code or of customer impact at this time.
Click to expand...

Microsoft

ronjor · Dec 23, 2008

Tuesday 12/23 Update: Microsoft Security Advisory 961040

Posted Tuesday, December 23, 2008 4:51 PM by MSRCTEAM

Hello, Bill here,

I want to provide you with a quick update regarding our recently released security advisory.

In the advisory we provide a workaround to help customers protect themselves from attackers trying to exploit this vulnerability. Customers have told us that it’s helpful when we provide information and guidance on how to automate the deployment of workarounds, so we have taken this a step further and worked with the SQL Engineering Team to providing Enterprise and Business Users a script that applies the workaround on all running instances of SQL Server on the local computer. Essentially, the script iterates through the running instances of SQL Server and denies execute permissions on sp_replwritetovarbin to “public” on all the affected versions. You can find additional information on this script and how to use it in Knowledge Base Article 961040.
Click to expand...

Microsoft

Log in or Sign up

Microsoft Security Advisory (961040)

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Microsoft Security Advisory (961040)

ronjor Global Moderator

ronjor Global Moderator

Useful Searches