OSVDB ID: 878 Title: Microsoft SQL Resolution Service Keep-Alive Function DoS |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft SQL Server and Desktop Engine contain a flaw that may allow a remote attacker to cause a denial of service. The issue is due to a flaw in the keep-alive function in the SQL Resolution Service. If a remote attacker sends a specially crafted packet with a spoofed source address, the server will fall into a recursive loop sending packets to itself. Such an attack would consume system resources as well as bandwidth resources. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service Impact: Loss of Availability Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|
ngssoftware.com - NGSSoftware