CVE-2004-1560: Buffer Overflow
Published Dec 31, 2004
·Updated
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
Affected Software
5 affected components
Microsoft SQL Server=7.0-sp1
Microsoft SQL Server=7.0
Microsoft SQL Server=7.0-sp3
Microsoft SQL Server=7.0-sp4
Microsoft SQL Server=7.0-sp2
Event History
Dec 31, 2004
CVE Published
05:00 AM
Feb 20, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1560?
CVE-2004-1560 is considered a critical severity vulnerability due to its potential for denial of service attacks.
2
How do I fix CVE-2004-1560?
To fix CVE-2004-1560, users should apply the latest security patches and updates for Microsoft SQL Server 7.0.
3
What systems are affected by CVE-2004-1560?
CVE-2004-1560 affects all versions of Microsoft SQL Server 7.0, including service packs 1 through 4.
4
What type of attack does CVE-2004-1560 allow?
CVE-2004-1560 allows remote attackers to launch a denial of service attack that can halt the mssqlserver service.
5
Is CVE-2004-1560 exploitable over the internet?
Yes, CVE-2004-1560 is exploitable remotely over TCP port 1433, making it a significant risk for internet-facing services.