Vulnerability in SQL Server Could Allow Remote Code Execution

Andres Bohren

2008-12-28

Hallo zusammen,

Microsoft hat am 22.12.2008 ein Advisory für SQL Server 2000 und SQL Server 2005 herausgegeben.

Der Workaround kann mit dem QueryAnalizer folgendermassen ausgeführt werden.

use master

deny execute on sp_replwritetovarbin to public

Grüsse

Andres Bohren

Works as a Microsoft Cloud Engineer/Architect for midsize to large Enterprises. He has a special focus on M365 including Identity, Messaging, Communication, Security and PowerShell but also Azure Technologies. He is Co-Organisator of the <Microsoft 365 Community Schweiz> Meetup group and was Speaker at several other Meetups.