MS.SQL.Server.Resolution.Service.Heap.Overflow

Description

It indicates a heap overflow vulnerability in Microsoft SQL Server Resolution Service.

There exists a flaw in some versions of Microsoft SQL Server that allows a remote attacker to cause Denial-of-Service or even execute arbitrary code on a target machine by passing it a specially-crafted packet.

Affected Products

Any unprotected MS SQL 2000 server is vulnerable to the attack.

Impact

Attackers can cause DoS against the SQL server or even execute arbitrary code on the victim system.

Recommended Actions

Patch the server from Microsoft.

Block external access to the MS SQL service on port 1433 and 1434

References