Exploit DM Database Server - 'SP_DEL_BAK_EXPIRED' Memory Corruption

[Exploiter]

EDB-ID

34058

Проверка EDB

1. Пройдено

Автор

SHENNAN WANG HUAWEISYMANTEC SRT

Тип уязвимости

DOS

Платформа

MULTIPLE

CVE

cve-2010-2159

Дата публикации

2010-05-31

source: https://www.securityfocus.com/bid/40460/info

DM Database Server is a database application.

DM Database Server is prone to a remote memory-corruption vulnerability. This issue affects the 'CALL SP_DEL_BAK_EXPIRED' function when a large string is passed to the first argument.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. 

CALL SP_DEL_BAK_EXPIRED('AAAAAAAAAAAAAAAAAAAA', '');