PT-2002-1672 · Microsoft · Sql Server Desktop Engine (Msde) 2000+1

Published 2002-07-12 · Updated 2018-10-12 · CVE-2002-0624

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2000 versions Microsoft SQL Server Desktop Engine (MSDE) 2000 versions

Description A buffer overflow issue exists in the password encryption function, allowing remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication.

Recommendations For Microsoft SQL Server 2000, apply the necessary patch to fix the buffer overflow issue in the password encryption function. For Microsoft SQL Server Desktop Engine (MSDE) 2000, apply the necessary patch to fix the buffer overflow issue in the password encryption function.

Exploit

Fix

Related Identifiers

CVE-2002-0624

Affected Products

Sql Server 2000

Sql Server Desktop Engine (Msde) 2000

References · 5

• 🔥 https://exploit-db.com/exploits/21549 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0624 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291 · Note
• http://cert.org/advisories/CA-2002-22.html · Note