CVE-2002-0624
Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 22.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 22.84% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/msde · microsoft/sql server
- Source
- cve@mitre.org
References
- http://www.cert.org/advisories/CA-2002-22.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291
- http://www.cert.org/advisories/CA-2002-22.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.