Rapid7

module

MS02-039 Microsoft SQL Server Resolution Overflow

Try Surface Command
Back to search
Disclosed
Jul 24, 2002
Created
May 30, 2018

Description

This is an exploit for the SQL Server 2000 resolution
service buffer overflow. This overflow is triggered by
sending a udp packet to port 1434 which starts with 0x04 and
is followed by long string terminating with a colon and a
number. This module should work against any vulnerable SQL
Server 2000 or MSDE install (pre-SP3).

Author

hdm [email protected]

Platform

Windows

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use exploit/windows/mssql/ms02_039_slammer
    msf exploit(ms02_039_slammer) > show targets
        ...targets...
    msf exploit(ms02_039_slammer) > set TARGET < target-id >
    msf exploit(ms02_039_slammer) > show options
        ...show and set options...
    msf exploit(ms02_039_slammer) > exploit
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report