AppDetective™ Update 2.5.98 - 27 November 2002

NEW CHECKS

Sybase

Title: DBCC CHECKVERIFY buffer overflow
Summary:
The built-in function DBCC CHECKVERIFY contains a buffer overflow that may allow an attacker to overwrite the stack and execute arbitrary code under the security context of the server. Any valid login in Sybase is able to execute this function.
NOTE: Team SHATTER Security Alert

Title: DROP DATABASE buffer overflow
Summary:
The built-in function DROP DATABASE contains a buffer overflow that may allow an attacker to overwrite the stack and execute arbitrary code under the security context of the server. Any valid login in Sybase is able to execute this function.
NOTE: Team SHATTER Security Alert

Title: xp_freedll buffer overflow
Summary:
The extended stored procedure xp_freedll contains a buffer overflow that may allow an attacker to overwrite the stack and execute arbitrary code under the security context of the server. Execute permissions are granted by default to public in the sybsystemprocs database on this extended stored procedure.
NOTE: Team SHATTER Security Alert