Vulnerability in SQL Server Could Allow Remote Code Execution

Andres Bohren

2008-12-28

Hallo zusammen,

Microsoft hat am 22.12.2008 ein Advisory für SQL Server 2000 und SQL Server 2005 herausgegeben.

Der Workaround kann mit dem QueryAnalizer folgendermassen ausgeführt werden.

use master

deny execute on sp_replwritetovarbin to public

Grüsse

Andres Bohren

Andres works as a Senior Microsoft Cloud Engineer/Architect for midsize to large Enterprises at isolutions in Switzerland. He has a special focus on M365 including Identity, Messaging, Communication, Security and PowerShell but also some Azure Technologies. He is Co-Organisator of the Microsoft 365 Community Schweiz Meetup group and was Speaker at several other Meetups or Conferences. He likes good Food, his Bike and nice Dive spots all over the World.