Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures (1) xp_pty_checkusers, (2) xp_pty_insert, or (3) xp_pty_select.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Secure.data | Protegrity | 2.2.3.7 (including) | 2.2.3.7 (including) |
| Secure.data | Protegrity | 2.2.3.8 (including) | 2.2.3.8 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=104758650516677\u0026w=2
- http://secunia.com/advisories/8294
- http://www.kb.cert.org/vuls/id/247545
- http://www.securityfocus.com/bid/7083
- http://www.securityfocus.com/bid/7084
- http://www.securityfocus.com/bid/7085
- http://marc.info/?l=bugtraq\u0026m=104758650516677\u0026w=2
- http://secunia.com/advisories/8294
- http://www.kb.cert.org/vuls/id/247545
- http://www.securityfocus.com/bid/7083
- http://www.securityfocus.com/bid/7084
- http://www.securityfocus.com/bid/7085