high7.5Public exploit code
CVE-2002-1123
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft SQL Server 2000 - User Authentication Remote Buffer Overflow2002-08-06 · remote · windows · Verified
- Microsoft SQL Server - Hello Overflow (MS02-056) (Metasploit)2010-04-30 · remote · windows · Verified
Impact
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Data Engine | Version 2000 |
| Microsoft | Sql Server | Version 2000 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=102873609025020&w=2
- http://online.securityfocus.com/archive/1/286220
- http://www.ciac.org/ciac/bulletins/n-003.shtml
- http://www.iss.net/security_center/static/9788.php
- http://www.securityfocus.com/bid/5411
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056
- http://marc.info/?l=bugtraq&m=102873609025020&w=2
- http://online.securityfocus.com/archive/1/286220
- http://www.ciac.org/ciac/bulletins/n-003.shtml
- http://www.iss.net/security_center/static/9788.php
- http://www.securityfocus.com/bid/5411
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056