????? ??? ??????? ??? ??????? ????? ???? ???? SQL Server ??? ???? ?? ???? ???? ????? ???? ????? (NULL)

?????? ????????? ?????? ?????????
???? ???????: 313418 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

???????

??????? ????? ? code-named "Voyager Alpha ??? ?" ???? ?????? ?? ???? SQL ????? ?? ?????? ??? ????? ???? (sa) ????? ?????? ??? ????????. ??????? ??????? ???? ?? ???? ???? ?????? SQL Server ??? ????? ????? ?? ???? 1433. ?????? 1433 ?? ?????? ????????? SQL Server. ??? ??? ??????? ??????? ???? ? ????? ????? ?????? ??? ???? ????????? ??? SQL Server ???????? ???? ???? ????? (NULL) sa.

?? ???? ???? ????? ?????? ???? ???? ????? ???? SQL ??? ????? ??? ???? ?????? ????? ?????? "(IRC) ? ?????? ?? ????? ?????? ??? ???? ??????? ?? ???? FTP ?? ???????. ????? ?????? ??? SQL Server ??? ???? sa ???????? ?? ?????? ??????? ??? ????????? ???? ???????? ??? ???? ??????? ?????? ?? ? ?? ??????? ?? ???? ?????? ??? ????? ????????? ??????.

???? ??????

????? ?? ?? ??????? ???????? ?? ??? ?????? ??? ?????? ???? ?????? ???? ??? ?? ?? ???? ??? ??? ??? ??? ??????? ??????? ????? ?? ????? ?????? ????? ?? ???? ????? ??????? SQL Server. ???? ?? ??????? ??????? ??? ?? ?????? ??????? "???? ?????????" ?? ??? ?? ????? SQL Server.
  • ??? ??? ??? ?????? "????? ??????" (Windows ???????? "?" ?????? ???? SQL) ? ????? ???? ????? ?????? ????? ?? sa "???????? ???? ???? ??? ?????. ???? ??????? ??????? ??? ??? ??? ???? ???? ????? ????? ?????? sa. ????? ?? ?????? ???? ??????? ?? ??????? "????? ?????? ??????? (SA) ??????" ?? SQL Server ???????? ?????? ?? ?? ???? sa ??????? ?? ???? ???? ???? ??? ?? ???? ??? ?????? ??????? ???? sa ?????. ?????? ??? ?????? ?? ?????? ????? ??? ?????? Windows (?????? Windows ???) ? ???????? ????? ?????? ??? ?? ??? ?????? ?????? ??????? sa. ????? ??????? ???????? ?????? Windows.
  • ????? ????? ??????? ?????? ??????? ???? ??????? ?? ???? ???? MSSQLServer ????.
  • ??? ???? 1433 ?? ??????? ?????? ?????? SQL Server ??????? ??? ???? ????.
  • ??? ??? ??? ?? ???? ?????? 1433 ?????? ??? ??????? ??????, ????? egress/ingress ??????? ???? ??? ??????? ?? ??? ?????? ?????? ???? ?????? ?????? ?? ????? ???? ??????? ?????? ??? ???? ?? ????????? ??? ????? ????? ingress/egress.

  • ????? ???? SQLServer ? SQL Server ???? ??? ???? Microsoft Windows NT ????? ? ??? ???? ????? ????.
?????? ??? ??????? ??? ????? ??????? ???? ?????? ??????? ?? ?????? ???? CERT ????? ??? ??????? ?? ???? ??? ??????:
"??????? ?????? ??????? ?? UNIX ?? ????? ?????? NT"
http://www.cert.org/tech_tips/win-UNIX-system_compromise.html

"????? ???????? ????? ???????"
http://www.cert.org/archive/pdf/WIDC.pdf
???? Microsoft ??????? ??? ??????? ?????? ????? ???? ???????? ?? ?????? ??? ????? ??????. ?? ??? ????? ??????? ??? ??????? ??? ???? ?????. ??? ???? Microsoft ??? ??? ????????? ???? ???????.

??????? ????

???: ???? ?? ??? ?? SQL Server ???? ???? ??? penetration; ??? ????? ??? ????? ???? ?? ??????? ?????? ???? ??? ???.

???? ??????? ??????? ??? ???? ??????? ???????:
  • rpcloc32.exe (md5 = 43d29ba076b4fd7952c936dc1737fcb4)
  • dnsservice.exe (md5 = 79386a78a03a1665803d8a65c04c8791)
  • win32mon.exe (md5 = 4cd44f24bd3d6305df73d8aa16d4caa0)
???????? ??? ???? ???? ???? ????? ??????? ?????? ??? ???? ??? ??????? ???????:
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\TaskReg
?????? ??????? ??????? ?? ???????? ???????? ?? SQL Server ?? ??? ????????? ?????? ??????? ??????? ?????? ?? ?????? ??? ????????? ???????? ????? ???? ??????? TCP/IP:
SOFTWARE\Microsoft\MSSQLServer\Client\SuperSocketNetLib\ProtocolOrder
SOFTWARE\Microsoft\MSSQLServer\Client\ConnectTo\DSQUERY
?????? ??????? ??????? xp_cmdshell ????? ??????? ?????? ???? ???? ??????? ??????? ????? ?? ??? ?? ????? ???? ??????? ?? ?????? ???? ???? ???? SQL Server ???? ????? ??????.

????? ?? ????????? ??? ????? ???????? ??? ????? ???? SQL Server ?????? ????? Microsoft ??????? ??? ?????:
http://www.microsoft.com/sql/technologies/security/default.mspx

http://technet.microsoft.com/en-us/library/bb545450.aspx

???????

???? ???????: 313418 - ????? ??? ??????: 13/???/1428 - ??????: 7.5
????? ???
  • Microsoft SQL Server 2000 Standard Edition
  • Microsoft SQL Server 7.0 Standard Edition
  • Microsoft Data Engine 1.0
????? ??????: 
kbmt kbprb KB313418 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????313418

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com