CVE-2002-0641 Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute ar...
HighCVSS 7.5
EPSS 11.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft msde | = 2000 | No fix listed |
| Microsoft sql server | = 2000 | No fix listed |
References
- 20020711 Microsoft SQL Server 2000 'BULK INSERT' Buffer Overflow (#NISR11072002) mailing-list
- VU#682620 third-party-advisory us-government-resource
- www.ngssoftware.com
- 4847 vdb-entry
- MS02-034 vendor-advisory
- oval:org.mitre.oval:def:316 signature vdb-entry