Microsoft SQL Server Unsupported Version Detection

Critical Nessus Plugin ID 64784

Synopsis

An unsupported version of a database server is running on the remote host.

Description

According to its self-reported version number, the installation of Microsoft SQL Server on the remote host is no longer supported.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

Solution

Upgrade to a version of Microsoft SQL Server that is currently supported.

See Also

http://www.nessus.org/u?d4418a57

Plugin Details

Severity: Critical

ID: 64784

File Name: mssql_unsupported.nasl

Version: 1.22

Type: local

Family: Databases

Published: 2013/02/21

Updated: 2019/12/11

Dependencies: 11217

Risk Information

Risk Factor: Critical

CVSS Score Source: manual

CVSS Score Rationale: This version of the software is no longer supported.

CVSS v2.0

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3.0

Base Score: 10

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:microsoft:sql_server

Required KB Items: mssql/installed