CVE-2002-0641
published 2002-07-23CVE-2002-0641: Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with…
PriorityP335high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
11.24%
95.5th percentile
Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | msde | — | — |
| microsoft | sql_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=102639885223746&w=2http://www.kb.cert.org/vuls/id/682620http://www.ngssoftware.com/advisories/ms-sqlbi.txthttp://www.securityfocus.com/bid/4847https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316http://marc.info/?l=bugtraq&m=102639885223746&w=2http://www.kb.cert.org/vuls/id/682620http://www.ngssoftware.com/advisories/ms-sqlbi.txthttp://www.securityfocus.com/bid/4847https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316
2002-07-23
Published