Vulnerabilities > CVE-2002-0624 - Unspecified vulnerability in Microsoft Msde and SQL Server

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
microsoft
exploit available
NVD
Published: 2002-07-23
Updated: 2024-11-20

Summary

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

Exploit-Db

descriptionMicrosoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability. CVE-2002-0624. Local exploit for windows platform
idEDB-ID:21549
last seen2016-02-02
modified2002-06-14
published2002-06-14
reporterMartin Rakhmanoff
sourcehttps://www.exploit-db.com/download/21549/
titleMicrosoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability

Oval

accepted2014-06-23T04:07:46.400-04:00
classvulnerability
contributors
  • nameYi-Fang Koh
    organizationThe MITRE Corporation
  • nameIngrid Skoog
    organizationThe MITRE Corporation
  • nameIngrid Skoog
    organizationThe MITRE Corporation
  • nameIngrid Skoog
    organizationThe MITRE Corporation
  • nameIngrid Skoog
    organizationThe MITRE Corporation
  • nameIngrid Skoog
    organizationThe MITRE Corporation
  • nameIngrid Skoog
    organizationThe MITRE Corporation
  • nameIngrid Skoog
    organizationThe MITRE Corporation
  • nameJerome Athias
    organizationMcAfee, Inc.
descriptionBuffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
familywindows
idoval:org.mitre.oval:def:291
statusaccepted
submitted2003-10-10T12:00:00.000-04:00
titleUnchecked Buffer in Password Encryption Procedure
version4

References