exploits , vulnerabilities , articles , Microsoft SQL Server LPC Port Request Buffer Overflow Vulnerability

Title	Microsoft SQL Server LPC Port Request Buffer Overflow Vulnerability
Published	2003-07-23-12:00AM
Updated	2003-07-25-02:10PM
Class	Boundary Condition Error
CVE	CAN-2003-0232
Remote	No
Local	Yes
Credit	Discovery is credited to Andreas Junstream of @Stake.
Vulnerable	Microsoft SQL Server 2000 Desktop Engine Akiva WebBoard 6.1 Microsoft Access 2000 Microsoft Application Center 2000 Microsoft BizTalk Server 2000 Developer Edition Microsoft BizTalk Server 2000 Enterprise Edition Microsoft BizTalk Server 2000 Standard Edition Microsoft BizTalk Server 2002 Developer Edition Microsoft BizTalk Server 2002 Enterprise Edition Microsoft Office 2000 Microsoft Project Central Server Microsoft SharePoint Team Services from Microsoft Microsoft Visio 2000 Enterprise Edition Microsoft Visio Enterprise Network Tools Microsoft Visual FoxPro 6.0 Microsoft Visual Studio 6.0 Microsoft Visual Studio .NET Academic Edition Microsoft Visual Studio .NET Enterprise Architect Edition Microsoft Visual Studio .NET Enterprise Developer Edition Microsoft Visual Studio .NET Professional Edition SmartMax Software MailMax 5.0 Veritas Software Backup Exec for Windows Servers 9.0 Microsoft SQL Server 2000 SP3a Microsoft SQL Server 2000 SP3 Microsoft SQL Server 2000 SP2 Microsoft SQL Server 2000 SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Microsoft SQL Server 2000 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Microsoft SQL Server 7.0 SP4 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 SP3 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 SP2 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 SP1 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 Microsoft BackOffice 4.5 Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 SP1 Microsoft Windows NT 4.0 SP2 Microsoft Windows NT 4.0 SP3 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Microsoft Data Engine 1.0 Affymetrix Microarray Suite Software 5.0 Affymetrix Microarray Suite Software 5.0.1 Altiris Deployment Server 5.0.1 Altiris Deployment Server 5.5 BlackBerry Enterprise Server 2.0 .0.65 Centennial UK Ltd Centennial Discovery 4.4 Compaq Insight Manager 7.0 Compaq Insight Manager 7.0 SP1 Gerber Technology WebPDM 3.9 McAfee ePolicy Orchestrator 1.0 McAfee ePolicy Orchestrator 1.1 McAfee ePolicy Orchestrator 2.0 McAfee ePolicy Orchestrator 2.5 McAfee ePolicy Orchestrator 2.5 SP1 Microsoft Access 2000 Microsoft Project Central Server Microsoft SharePoint Team Services from Microsoft Microsoft Visual Studio 6.0 PowerQuest ControlCenter ST 2.0 PPM 2000 Incident Reporting and Investigation Management 5.1 Trend Micro Control Manager 2.5 Trend Micro Damage Cleanup Server 1.0 Vital Processing Services LLC POSpartner 2000 4.1.11 Vital Processing Services LLC POSpartner 2000 5.0.13 Websense Reporter 6.3.1
Not Vulnerable
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
2009-12-17 Drupal Sections Module HTML Injection Vulnerability
2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability