GCVE-110-CERTCC-2008-696644

Advisory PublishedCVSS 0.0/10

Vulnetix · Advisory published December 9, 2008

A vulnerability in the Microsoft SQL Server sp_replwritetovarbin extended stored procedure could allow an authenticated attacker to execute arbitrary code on an affected server.

Download JSON Open in Console

Risk Scores

CVSS 2.0

0.0/10

None · AV:--/AC:--/Au:--/C:--/I:--/A:--

certcc-cam

impact18population10exploitation0widely_known20score_current4.455ease_of_exploitation5

certcc-vrda

d1_impact3d1_population2d1_direct_report0

certcc-cvss-temporal-env

temporal_score0remediation_levelNDreport_confidenceNDenvironmental_score0target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2008-5416

References

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

url

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

url

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

advisory

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

advisory

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

advisory

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

advisory

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

advisory

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

advisory

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON