CVE-2002-0186 Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer....
HighCVSS 7.5
EPSS 55.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft sql server | = 2000 | No fix listed |
| Microsoft sql server | = 2000-sp1 | No fix listed |
| Microsoft sql server | = 2000-sp2 | No fix listed |
References
- 20020613 [VulnWatch] wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting mailing-list patch vendor-advisory
- 20020613 wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting mailing-list
- mssql-sqlxml-isapi-bo(9328) vdb-entry
- VU#811371 third-party-advisory us-government-resource
- 5347 vdb-entry
- 5004 vdb-entry
- MS02-030 vendor-advisory
- oval:org.mitre.oval:def:484 signature vdb-entry
- oval:org.mitre.oval:def:489 signature vdb-entry