VulnerabilityModified
CVE-2002-0186
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
HIGH 7.5EPSS 55.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 55.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 55.45% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/sql server
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.htmlPatch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102397345410856&w=2
- http://www.iss.net/security_center/static/9328.php
- http://www.kb.cert.org/vuls/id/811371US Government Resource
- http://www.osvdb.org/5347
- http://www.securityfocus.com/bid/5004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A484
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A489
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.htmlPatch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102397345410856&w=2
- http://www.iss.net/security_center/static/9328.php
- http://www.kb.cert.org/vuls/id/811371US Government Resource
- http://www.osvdb.org/5347
- http://www.securityfocus.com/bid/5004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A484
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A489
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.