jetlib.sec » Tags » microsoft-sql-server

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

20 items tagged "microsoft sql server"

Related tags: vulnerability [+], version [+], technical [+], sql server version [+], sql server 2000 [+], server versions [+], public tools [+], payloads [+], microsoft sql server 2000 [+], microsoft server software [+], microsoft developer tools [+], injection [+], exact point [+], database command [+], cyber [+], sqlninja [+], proof of concept [+], ms sql server [+], clr [+], tool [+], sql injection [+], remote shell [+], read [+], penetration testers [+], ms sql [+], memory corruption [+], hacking [+], database [+], sql [+], microsoft [+], server [+]

• April 11, 2012
• 20:28

  Microsoft SQL Server Privilege Escalation / SQL Injection

   » ‎ Packet Storm Security Advisories
  Team SHATTER Security Advisory - Microsoft SQL Server versions 2005, 2008, and 2008 R2 suffer from a SQL injection vulnerability in the RESTORE DATABASE command that can lead to privilege escalation.

  Tags:  server microsoft sql microsoft-sql-server database-command server-versions  

• 20:28

  Microsoft SQL Server Privilege Escalation / SQL Injection

   » ‎ Packet Storm Security Recent Files
  Team SHATTER Security Advisory - Microsoft SQL Server versions 2005, 2008, and 2008 R2 suffer from a SQL injection vulnerability in the RESTORE DATABASE command that can lead to privilege escalation.

  Tags:  server microsoft sql microsoft-sql-server database-command server-versions  

• 20:28

  Microsoft SQL Server Privilege Escalation / SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Team SHATTER Security Advisory - Microsoft SQL Server versions 2005, 2008, and 2008 R2 suffer from a SQL injection vulnerability in the RESTORE DATABASE command that can lead to privilege escalation.

  Tags:  server microsoft sql microsoft-sql-server database-command server-versions  

• 8:07

  Technical Cyber Security Alert 2012-101A

   » ‎ Packet Storm Security Advisories
  Technical Cyber Security Alert 2012-101A - There are multiple vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft .NET Framework, Microsoft Office, Microsoft Server Software, Microsoft SQL Server, Microsoft Developer Tools, and Microsoft Forefront United Access Gateway. Microsoft has released updates to address these vulnerabilities.

  Tags:  microsoft technical cyber microsoft-developer-tools microsoft-server-software microsoft-sql-server  

• 8:07

  Technical Cyber Security Alert 2012-101A

   » ‎ Packet Storm Security Recent Files
  Technical Cyber Security Alert 2012-101A - There are multiple vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft .NET Framework, Microsoft Office, Microsoft Server Software, Microsoft SQL Server, Microsoft Developer Tools, and Microsoft Forefront United Access Gateway. Microsoft has released updates to address these vulnerabilities.

  Tags:  microsoft technical cyber microsoft-developer-tools microsoft-server-software microsoft-sql-server  

• 8:07

  Technical Cyber Security Alert 2012-101A

   » ‎ Packet Storm Security Misc. Files
  Technical Cyber Security Alert 2012-101A - There are multiple vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft .NET Framework, Microsoft Office, Microsoft Server Software, Microsoft SQL Server, Microsoft Developer Tools, and Microsoft Forefront United Access Gateway. Microsoft has released updates to address these vulnerabilities.

  Tags:  microsoft technical cyber microsoft-developer-tools microsoft-server-software microsoft-sql-server  

• January 15, 2012
• 18:40

  Exploit Next Generation SQL Fingerprint 1.12.120115/RC0

   » ‎ Packet Storm Security Recent Files
  The Exploit Next Generation® SQL Fingerprint tool uses well-known techniques based on several public tools capable of identifying the Microsoft SQL Server version (such as: SQLping and SQLver), but, instead of showing only the "raw version" (i.e., Microsoft SQL Version 10.00.2746), the Exploit Next Generation® SQL Fingerprint shows the mapped Microsoft SQL Server version (i.e., Microsoft SQL 2008 SP1 (CU5)).

  Tags:  version microsoft sql sql-server-version microsoft-sql-server public-tools  

• 18:40

  Exploit Next Generation SQL Fingerprint 1.12.120115/RC0

   » ‎ Packet Storm Security Tools
  The Exploit Next Generation® SQL Fingerprint tool uses well-known techniques based on several public tools capable of identifying the Microsoft SQL Server version (such as: SQLping and SQLver), but, instead of showing only the "raw version" (i.e., Microsoft SQL Version 10.00.2746), the Exploit Next Generation® SQL Fingerprint shows the mapped Microsoft SQL Server version (i.e., Microsoft SQL 2008 SP1 (CU5)).

  Tags:  version microsoft sql sql-server-version microsoft-sql-server public-tools  

• 18:40

  Exploit Next Generation SQL Fingerprint 1.12.120115/RC0

   » ‎ Packet Storm Security Misc. Files
  The Exploit Next Generation® SQL Fingerprint tool uses well-known techniques based on several public tools capable of identifying the Microsoft SQL Server version (such as: SQLping and SQLver), but, instead of showing only the "raw version" (i.e., Microsoft SQL Version 10.00.2746), the Exploit Next Generation® SQL Fingerprint shows the mapped Microsoft SQL Server version (i.e., Microsoft SQL 2008 SP1 (CU5)).

  Tags:  version microsoft sql sql-server-version microsoft-sql-server public-tools  

• January 29, 2011
• 13:48

  Microsoft SQL Server Payload Execution via SQL injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module will execute an arbitrary payload on a Microsoft SQL Server, using a SQL injection vulnerability. Once a vulnerability is identified this module will use xp_cmdshell to upload and execute Metasploit payloads. It is necessary to specify the exact point where the SQL injection vulnerability happens.

  Tags:  vulnerability injection sql microsoft-sql-server exact-point payloads  

• 13:48

  Microsoft SQL Server Payload Execution via SQL injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module will execute an arbitrary payload on a Microsoft SQL Server, using a SQL injection vulnerability. Once a vulnerability is identified this module will use xp_cmdshell to upload and execute Metasploit payloads. It is necessary to specify the exact point where the SQL injection vulnerability happens.

  Tags:  vulnerability injection sql microsoft-sql-server exact-point payloads  

• 13:48

  Microsoft SQL Server Payload Execution via SQL injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module will execute an arbitrary payload on a Microsoft SQL Server, using a SQL injection vulnerability. Once a vulnerability is identified this module will use xp_cmdshell to upload and execute Metasploit payloads. It is necessary to specify the exact point where the SQL injection vulnerability happens.

  Tags:  vulnerability injection sql microsoft-sql-server exact-point payloads  

• January 24, 2011
• 12:02

  Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploit smashes several pointers. A heap-based buffer overflow can occur when calling the undocumented "sp_replwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows Internal Database, and Microsoft Desktop Engine (MSDE) without the updates supplied in MS09-004. Microsoft patched this vulnerability in SP3 for 2005 without any public mention.

  Tags:  server microsoft sql microsoft-sql-server-2000 sql-server-2000 microsoft-sql-server  

• 12:02

  Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploit smashes several pointers. A heap-based buffer overflow can occur when calling the undocumented "sp_replwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows Internal Database, and Microsoft Desktop Engine (MSDE) without the updates supplied in MS09-004. Microsoft patched this vulnerability in SP3 for 2005 without any public mention.

  Tags:  server microsoft sql microsoft-sql-server-2000 sql-server-2000 microsoft-sql-server  

• 12:02

  Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploit smashes several pointers. A heap-based buffer overflow can occur when calling the undocumented "sp_replwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows Internal Database, and Microsoft Desktop Engine (MSDE) without the updates supplied in MS09-004. Microsoft patched this vulnerability in SP3 for 2005 without any public mention.

  Tags:  server microsoft sql microsoft-sql-server-2000 sql-server-2000 microsoft-sql-server  

• October 10, 2010
• 23:03

  MSSQL_CLR_Stored_Procedure_POC.zip

   » ‎ Packet Storm Security Recent Files
  Microsoft SQL Server supports so called CLR Stored Procedures which are written in a .NET language and are run directly inside MS SQL Server. If an hijacked account has appropriate permissions, it can be used to run a native payload (inject native code into a new thread) or to tunnel a TCP connection or a shell via the SQL port (needed if the database server is properly firewalled). They can also be combined to tunnel a reverse_tcp payload. Additional permissions, like xp_cmdshell, are not required. This file is a proof of concept that demonstrates this ability.

  Tags:  server clr sql ms-sql-server microsoft-sql-server proof-of-concept  

• 23:02

  MSSQL_CLR_Stored_Procedure_POC.zip

   » ‎ Packet Storm Security Exploits
  Microsoft SQL Server supports so called CLR Stored Procedures which are written in a .NET language and are run directly inside MS SQL Server. If an hijacked account has appropriate permissions, it can be used to run a native payload (inject native code into a new thread) or to tunnel a TCP connection or a shell via the SQL port (needed if the database server is properly firewalled). They can also be combined to tunnel a reverse_tcp payload. Additional permissions, like xp_cmdshell, are not required. This file is a proof of concept that demonstrates this ability.

  Tags:  server clr sql ms-sql-server microsoft-sql-server proof-of-concept  

• May 17, 2010
• 22:22

  sqlninja v0.2.5 Released – Microsoft SQL Server (MS-SQL) SQL Injection Vulnerability Tool

   » ‎ Darknet
  It’s been 2 years, but a new version of sqlninja is out at Sourceforge, we wrote about the previous release back in 2008 and we’ve actually been following this tool since 2006! Sqlninja is a tool to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  sqlninja tool sql read microsoft-sql-server sql-injection ms-sql database hacking  

• May 10, 2010
• 16:00

  sqlninja-0.2.5.tgz

   » ‎ Packet Storm Security Tools
  sqlninja is a small tool to exploit SQL injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable database server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a database Server when a SQL injection vulnerability has been discovered. It is written in perl and runs on Unix-like boxes.

  Tags:  server sqlninja sql microsoft-sql-server penetration-testers remote-shell  

• January 19, 2010
• 0:00

  Vuln: Microsoft SQL Server 'sp_replwritetovarbin' Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft SQL Server 'sp_replwritetovarbin' Remote Memory Corruption Vulnerability

  Tags:  server microsoft sql microsoft-sql-server memory-corruption vulnerability