PT-2002-1672 · Microsoft · Sql Server Desktop Engine (Msde) 2000+1

Publicado 2002-07-12 · Atualizado 2018-10-12 · CVE-2002-0624

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2000 versions Microsoft SQL Server Desktop Engine (MSDE) 2000 versions

Description A buffer overflow issue exists in the password encryption function, allowing remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication.

Recommendations For Microsoft SQL Server 2000, apply the necessary patch to fix the buffer overflow issue in the password encryption function. For Microsoft SQL Server Desktop Engine (MSDE) 2000, apply the necessary patch to fix the buffer overflow issue in the password encryption function.

Exploit

Correção

Identificadores relacionados

CVE-2002-0624

Produtos afetados

Sql Server 2000

Sql Server Desktop Engine (Msde) 2000

Referências · 5

• 🔥 https://exploit-db.com/exploits/21549 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0624 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291 · Nota
• http://cert.org/advisories/CA-2002-22.html · Nota