[Full-disclosure] [Sec-1 Ltd] Buffer Truncation Abuse in Microsoft SQL Server Based Applications



Buffer Truncation Abuse in Microsoft SQL Server Based Applications

Release Date: 3rd July 2007
Author: Gary O'Leary-Steele
Web Site: www.sec-1.com

This paper is designed to document an attack technique Sec-1 recently
adopted during the course of their application assessments. The basic
principal of this technique has existed for some time; however we hope
this paper we will provide an insight of how a variation of the
technique can be adopted to attack common "forgotten password"
functionality within web applications.

Our initial intention was to release this paper along with a case study
demonstrating the flaw within a commercial application. However since
the vendor has yet to fix the flaw it was decided that an initial
censored release will be followed up with the complete release further
down the line.

The paper can be downloaded here:

http://www.sec-1labs.co.uk/papers/BTA_CensoredRelease.pdf





Sec-1 specialises in the provision of network security solutions.
For more information on products and services we offer visit
www.sec-1.com
or call
0113 257 8955.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • [Sec-1 Ltd] Buffer Truncation Abuse in Microsoft SQL Server Based Applications
    ... Buffer Truncation Abuse in Microsoft SQL Server Based Applications ... This paper is designed to document an attack technique Sec-1 recently ... solution FREE - limited Time Offer ...
    (Pen-Test)
  • Re: diodes learning to swim
    ... The micro pump idea might have some interesting applications. ... Unfortunately, it appears that this technique requires high pH levels, ... so putting Rachel Welch in a miniature submarine and injecting her into ...
    (sci.electronics.design)
  • Re: diodes learning to swim
    ... movies here, http://www.che.ncsu.edu/velevgroup/nmat1843_movies.htm ... The micro pump idea might have some interesting applications. ... Unfortunately, it appears that this technique requires high pH levels, ...
    (sci.electronics.design)
  • Re: CStdioFile::WriteString() question
    ... Couldn't one overcome the concurrent access limitation with a ... files I'm munging with this technique are specific only to my own ... little applications where more than one instance won't be running at a ...
    (microsoft.public.vc.mfc)