TDS Protocol Analysis and Loophole Detection
Haitao Wu · Jisuanji gongcheng · 2009
This paper researches and analyzes the undisclosed protocol TDS 8.0 which used in the Microsoft SQL Sever 2000, receives and sends the TDS data packets, analyzes the communication rule of TDS protocol and all types of TDS package, sums up the entire TDS protocol structural framework and gives a detailed description of every TDS segment meaning.Basing on the protocol analysis, this paper researches the system structure and security loopholes of the Microsoft SQL Sever 2000, compiles the loophole test program to validate TDS 8.0 protocol and finds out the secure problems in the TDS 8.0 protocol.