high7.5Public exploit code
CVE-2002-0859
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft SQL Server 2000 / Microsoft Jet 4.0 Engine - Unicode Buffer Overflow (PoC)2002-06-19 · dos · windows · Verified
Impact
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Jet | Version 4.0 |
| Microsoft | Sql Server | Version 2000 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=102450188620081&w=2
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010
- http://www.iss.net/security_center/static/9375.php
- http://www.nextgenss.com/advisories/mssql-ods.txt
- http://www.securityfocus.com/bid/5057
- http://marc.info/?l=bugtraq&m=102450188620081&w=2
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010
- http://www.iss.net/security_center/static/9375.php
- http://www.nextgenss.com/advisories/mssql-ods.txt
- http://www.securityfocus.com/bid/5057