Intrusion PreventionMS.SQL.Server.Insert.Statements.Privilege.Elevation
Description
This indicates an attack attempt to exploit a privilege elevation vulnerability in Microsoft SQL Server.
The vulnerability is caused by the lack of checks when the vulnerable software handles insert statements. It allows a remote attacker to execute arbitrary code by sending some crafted SQL expressions.
Affected Products
SQL Server 2005 SP1 and SQL Server 2005 SP2
SQL Server 2005 x64-based Edition SP1 and SQL Server 2005 x64-based Edition SP2
SQL Server 2005 for Itanium-based Systems and SQL Server 2005 SP1 and SP2
Microsoft SQL Server 2005 Express Edition SP1 and SP2
Microsoft SQL Server 2005 Express Edition with Advanced Services SP1 and SP2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply patch, available from the web site:
http://www.microsoft.com/technet/security/Bulletin/ms08-040.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15714 |
| Created | Jul 08, 2008 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2008-0106 |
| Exploit Prediction Score | 96.28% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MSSQL |