Home / bulletins

MS08-040 – Important: Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203) - Version:1.1

Posted on 10 July 2008

There is an newer version: MS08-040 - Version: 1.9

Severity Rating: Important - Revision Note: V1.1 (July 9, 2008): Removed erroneous references to SQL Server 2005 Service Pack 1 in the MBSA and SMS Detection and Deployment tables. Also clarified permissions requirements for vulnerability mitigating factors.Summary: This security update resolves four privately disclosed vulnerabilities. The more serious of the vulnerabilities could allow an attacker to run code and to take complete control of an affected system. An authenticated attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

Link

Other versions

 

TOP