high7.5Public exploit code
CVE-2002-0624
Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow2002-06-14 · local · windows · Verified
Impact
Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Msde | Version 2000 |
| Microsoft | Sql Server | Version 2000 |
References
- NVD record
- CVE.org record
- http://www.cert.org/advisories/CA-2002-22.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291
- http://www.cert.org/advisories/CA-2002-22.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291