SHARE
CORE IMPACT v8 - Exploits Update (Mon Feb 02 2009)
Microsoft SQL Server sp_replwritetovarbin Remote Heap Overflow Exploit
Exploits/Remote [Windows]
• Mon Feb 02 2009
This module exploits a heap-based buffer overflow in the Microsoft SQL Server by sending a specially crafted SQL query. It has two uses: One as a Remote Exploit which needs authentication, and another as an SQL Injection Agent installer module, which needs an SQL Agent as a target.
Exploits Vulnerabiltiy: CVE-2008-5416