First published: Fri Dec 31 2004(Updated: )
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft SQL Server | =7.0-sp1 | |
Microsoft SQL Server | =7.0 | |
Microsoft SQL Server | =7.0-sp3 | |
Microsoft SQL Server | =7.0-sp4 | |
Microsoft SQL Server | =7.0-sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1560 is considered a critical severity vulnerability due to its potential for denial of service attacks.
To fix CVE-2004-1560, users should apply the latest security patches and updates for Microsoft SQL Server 7.0.
CVE-2004-1560 affects all versions of Microsoft SQL Server 7.0, including service packs 1 through 4.
CVE-2004-1560 allows remote attackers to launch a denial of service attack that can halt the mssqlserver service.
Yes, CVE-2004-1560 is exploitable remotely over TCP port 1433, making it a significant risk for internet-facing services.