![]() ![]() |
|
MSSQLServer查询有效性检查漏洞 | |
作者:佚名 文章来源:不详 点击数 更新时间:2008/4/18 14:54:31 文章录入:杜斌 责任编辑:杜斌 | |
|
|
受影响系统: Microsoft Data Engine 1.0 - Microsoft Visual Studio 6.0 - Microsoft Windows NT 4.0 - Microsoft Access 2000 + Microsoft Office 2000 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000.0 Microsoft SQL Server 7.0 - Microsoft Windows NT 4.0 - Microsoft BackOffice 4.5 - Microsoft Windows NT 4.0 描述: by Microsoft Security Bulletin Microsoft SQL Serve 7.0和Data Engine(数据引擎)接收SQL查询时有可能造成数据库或系统被入侵。任何经过SQL验证的用户都有可能能够通过SQL SELECT命令以数据拥有者或管理员权限执行命令。 建议: Microsoft公司提供以下安全补丁: Microsoft Data Engine 1.0: Microsoft patch s70780a (Alpha Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132 Microsoft patch s70780i (Intel Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132 Microsoft SQL Server 7.0: Microsoft patch s70780a (Alpha Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132 Microsoft patch s70780i (Intel Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132 |
|
![]() ![]() |