PT-2002-2125 · Microsoft · Sql Server 2000+1

Publicado 2002-09-24 · Atualizado 2018-10-12 · CVE-2002-1123

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server 2000 Microsoft Desktop Engine (MSDE) 2000

Description: A buffer overflow issue exists in the authentication function, allowing remote attackers to execute arbitrary code by sending a long request to TCP port 1433.

Recommendations: For Microsoft SQL Server 2000, apply the available patch to fix the buffer overflow issue. For Microsoft Desktop Engine (MSDE) 2000, apply the available patch to fix the buffer overflow issue.

Exploit

Correção

Identificadores relacionados

CVE-2002-1123

Produtos afetados

Desktop Engine (Msde) 2000

Sql Server 2000

Referências · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/ms02_056_hello.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16398 · Exploit
• 🔥 https://exploit-db.com/exploits/21693 · Exploit
• http://online.securityfocus.com/archive/1/286220 · Nota
• http://marc.info/?l=bugtraq&m=102873609025020&w=2 · Nota
• http://securityfocus.com/bid/5411 · Nota
• http://ciac.org/ciac/bulletins/n-003.shtml · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1123 · Nota de Segurança
• http://iss.net/security_center/static/9788.php · Aviso do Fabricante