PRB: ??? 1314 "??? ?????" xp_cmdshell "??? ?????" ??????? ???? SA

?????? ????????? ?????? ?????????
???? ???????: 248391 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

???????

???? ????? ????? ??????? ??? ????? ???? ??? ???? ??????? ???? xp_cmdshell ??? ????? ???? ??? SQL Server ???? sa:
msg 50001 ? ??????? 1 ???? 50001
xpsql.c: ??? 1314 ?? LogonUser ??? ??? 476
???? ????? ?? ???? ???????:
msg 50001 ? ??????? 1 ???? 50001
xpsql.c: ??? 1314 ?? CreateProcessAsUser ??? ??? 492

?????

??? ??? ??? ??????? ???? ??? ????? ??? ???? SQLAgentCmdExec Windows NT ???? ???? ?????? MSSQLServer ??? ???? errant ?????? ??.

???? ??????

???? ?? ?? ???? Windows NT ???? ???? ?????? ???? MSSQLServer ??? ???? ???? ??? ?????? ????????? ??????? ??? ??????.

???? ?? ?? ???? ???? MSSQLServer ??? ??????? ??? ? ???????? ??? SQLServerAgent ? ???????? ???? ???????? ???????:
  • ??????? ???? ?? ???? ???????.
  • ????? ????? ???????.
  • ??????? ??? ???? ??? ????? ???????.
  • ????? ?????? ????? ?????.
???? ????? ?? ?? ?????? SQLAgentCmdExec ?????? ???? ?????? "????? ?????? ????? ?????".

??????: ??? ????? ????? ?????? ?????? ???? ??? ????? SQL "? ?? ????? ?? ????? ?? ??????? ??? ???? ???????? ???????? ????? ???????.

??????? ????

??? ????? Xpsql.c ?? ????? ????????? ???????? ???? ???? ?? ??????. ??? ????? ????? ????? ??? ??? 476 ???? ??????? ?????? Win32 API: ??? LogonUser(). ???? ??? ???? ????? ??? 492 ??? ??? ??????? CreateProcessAsUser().

??? 1314 ?? ERROR_PRIVILEGE_NOT_HELD. ???? ??? ??? ??? ??? ??? ???? ??????? ??? ??????? ???? ?????? ????? ?????? ?? ????? ??????. ??????? ?????? ?? ??????? ????? ????? ???????? ???? ??? ???? SQLAgentCmdExec ?? ????? ??????? ???? ????? ?????????? ?? ????? ??????? SQL.

??? ???? ?? ??? ??? ??? ??????? ?? ??????? ???? ??? ??????? ????????? API (Sqlservr.exe). ????? ???? ?????? ???? ???? ???? ???? MSSQLServer ????? ???????? ??? ?????. ?? ??? ????? ????? LogonUser() ? ???? MSSQLServer ??? ?? ???? ???? SE_TCB_NAME (????? ???? ?? ???? ???????) ?????? ?????. ??? ????? ????? CreateProcessAsUser() ? ??? ?? ???? ???? ?????? (????? ??????? ?????) SE_INCREASE_QUOTA_NAME ????? ???? MSSQLServer.

??????: ??????? ????? ????? ?? ?????? CreateProcessAsUser() ?? ????? ????? SE_ASSIGNPRIMARYTOKEN_NAME (??????? ??? ???? ??? ????? ?????) ????? ???.

???????

???? ???????: 248391 - ????? ??? ??????: 21/?????/1424 - ??????: 3.1
????? ???
  • Microsoft SQL Server 6.5 Standard Edition
  • Microsoft SQL Server 7.0 Standard Edition
????? ??????: 
kbmt kbbug kbprb KB248391 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????248391

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com