• info
• discussion
• exploit
• solution
• references

Microsoft SQL Server / Data Engine xp_enumresultset Buffer Overflow Vulnerability

Solution:
Microsoft has released the following patches which eliminate the vulnerability:


Microsoft SQL Server 2000

• Microsoft Q280380
  Intel
  http://download.microsoft.com/download/SQLSVR2000/ss2kxp/2000/W98NT42K Me/EN-US/s80233i.exe

Microsoft SQL Server 7.0

• Microsoft Q280380
  Intel
  http://download.microsoft.com/download/sql70/Patch/7.0/WIN98Me/EN-US/s 70918i.exe


• Microsoft Q280380
  Alpha
  http://download.microsoft.com/download/sql70/ss7pespv/7.0/ALPHA/EN-US/ s70918a.exe