VulnerabilityModified
CVE-2001-0542
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf.
HIGH 7.5EPSS 13.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.6%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 13.62% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/sql server
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=100891252317406&w=2
- http://www.atstake.com/research/advisories/2001/a122001-1.txtPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/700575US Government Resource
- http://www.securityfocus.com/bid/3733Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7724
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83
- http://marc.info/?l=bugtraq&m=100891252317406&w=2
- http://www.atstake.com/research/advisories/2001/a122001-1.txtPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/700575US Government Resource
- http://www.securityfocus.com/bid/3733Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7724
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.