CVE-2002-0624

published 2002-07-23

CVE-2002-0624: Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	msde	—	—
microsoft	sql_server	—	—