Description
Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
References
- 20030821 AppSecInc Security Alert: Buffer Overflow in UDP broadcasts for Microsoft SQL Server client utilities mailing-list
- MS03-033 vendor-advisory
- 8455 vdb-entry
- oval:org.mitre.oval:def:1039 vdb-entry signature
- 20030821 AppSecInc Security Alert: Buffer Overflow in UDP broadcasts for Microsoft SQL Server client utilities mailing-list
- oval:org.mitre.oval:def:6954 vdb-entry signature
- oval:org.mitre.oval:def:961 vdb-entry signature
- oval:org.mitre.oval:def:962 vdb-entry signature