CVE-2008-5416

Published: Dec 10, 2008Modified: Apr 23, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability."

Affected (2)

Products: Microsoft: Sql Server

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sql Server	Version 2000
Microsoft Sql Server	Version 2005

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (44)

http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0304.html

Source: cve@mitre.org

http://osvdb.org/50917

Source: cve@mitre.org

http://secunia.com/advisories/33034

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4706

Source: cve@mitre.org

http://securitytracker.com/id?1021363

Source: cve@mitre.org

http://securitytracker.com/id?1021490

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2009-055.htm

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/696644

Source: cve@mitre.org

US Government Resource

http://www.microsoft.com/technet/security/advisory/961040.mspx

Source: cve@mitre.org

http://www.sec-consult.com/files/20081209_mssql-2000-sp_replwritetovarbin_memwrite.txt

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/499042/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499085/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/32710

Source: cve@mitre.org

Exploit

http://www.us-cert.gov/cas/techalerts/TA09-041A.html

Source: cve@mitre.org

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Source: cve@mitre.org

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3380

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-004

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47182

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6217

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7501

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0304.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50917

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33034

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/4706

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1021363

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1021490

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2009-055.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/696644

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.microsoft.com/technet/security/advisory/961040.mspx

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.sec-consult.com/files/20081209_mssql-2000-sp_replwritetovarbin_memwrite.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/499042/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/499085/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32710

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.us-cert.gov/cas/techalerts/TA09-041A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3380

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-004

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47182

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6217

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7501

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.