PT-2002-2125 · Microsoft · Sql Server 2000+1

Published 2002-09-24 · Updated 2018-10-12 · CVE-2002-1123

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server 2000 Microsoft Desktop Engine (MSDE) 2000

Description: A buffer overflow issue exists in the authentication function, allowing remote attackers to execute arbitrary code by sending a long request to TCP port 1433.

Recommendations: For Microsoft SQL Server 2000, apply the available patch to fix the buffer overflow issue. For Microsoft Desktop Engine (MSDE) 2000, apply the available patch to fix the buffer overflow issue.

Exploit

Fix

Related Identifiers

CVE-2002-1123

Affected Products

Desktop Engine (Msde) 2000

Sql Server 2000

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/ms02_056_hello.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16398 · Exploit
• 🔥 https://exploit-db.com/exploits/21693 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1123 · Security Note
• http://iss.net/security_center/static/9788.php · Vendor Advisory
• http://online.securityfocus.com/archive/1/286220 · Note
• http://marc.info/?l=bugtraq&m=102873609025020&w=2 · Note
• http://securityfocus.com/bid/5411 · Note
• http://ciac.org/ciac/bulletins/n-003.shtml · Note