Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Possible DoS attack against Microsoft SQL Server 7.0

Possible DoS attack against Microsoft SQL Server 7.0

From: kbelian <kbelian_at_BUSINESS-SOFT.COM>
Date: Thu, 18 Nov 1999 09:24:13 +0200

Hi,
Excuse me if this has been already reported (though I couldn't find relevant information).
MS SQL Server 7.0 silently crashes when sent a TCP packet containing more than 2 NULLs as data.

Description:
I tested this on a machine running SQL Server version 7.00.699. The NT box is running NT Server with SP 4 (I don't think the Service Pack is an issue since NT is not affected).
If the TCP/IP net library is enabled, the 3 or greater NULL bytes crach SQL Server listening on port 1433. The SQL server raises an event 17055 with fatal exception EXCEPTION_ACCESS VIOLATION.

Can anyone reproduce this?

It's interesting to mention that:
    - 1 or 2 NULL bytes don't affect the system.
    - A nornal service restart will reboot SQL Server

Thanx.
Kevork Belian

<!-- body="end" -->
<HR>

<UL>
<LI><STRONG>Next message:</STRONG> m4rcyS: "Re: vlock bug ? (fwd)"
<LI><STRONG>Previous message:</STRONG> Blue Boar: "Re: INZIDER!"
</UL>
<HR>

<SMALL>

This archive was generated by hypermail 2.0b3
on Thu Nov 18 1999 - 01:33:26 CST</EM>
</EM>
</SMALL>
</BODY>
</HTML>
Received on Nov 18 1999

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos