CVE-2008-0085: Infoleak
SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0085?
The severity of CVE-2008-0085 is rated as medium due to potential data corruption vulnerabilities.
How do I fix CVE-2008-0085?
To fix CVE-2008-0085, apply the latest service packs and updates provided by Microsoft for the affected versions of SQL Server.
What software versions are affected by CVE-2008-0085?
CVE-2008-0085 affects Microsoft SQL Server versions 7.0, 2000, 2005, and their respective service packs.
What impact does CVE-2008-0085 have?
The impact of CVE-2008-0085 may lead to data corruption and potential unauthorized access through memory exploitation.
Is there a workaround for CVE-2008-0085 if I can't apply the update immediately?
If immediate patching is not possible for CVE-2008-0085, it is advised to limit access to the database and closely monitor for any suspicious activity.