CVE-2002-0649 Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code...
HighCVSS 7.5
EPSS 84.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft data engine | = 2000 | No fix listed |
| Microsoft sql server | = 2000 | No fix listed |
| Microsoft sql server | = 2000-sp1 | No fix listed |
| Microsoft sql server | = 2000-sp2 | No fix listed |
References
- 20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) mailing-list
- 20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) mailing-list
- 7945 third-party-advisory vendor-advisory
- CA-2002-22 third-party-advisory us-government-resource
- CA-2003-04 third-party-advisory us-government-resource
- VU#399260 third-party-advisory us-government-resource
- VU#484891 third-party-advisory us-government-resource
- 20030125 MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030125 Fw: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030125 Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030125 SQL Sapphire Worm Analysis mailing-list
- 20030125 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030126 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030125 Sapphire SQL Worm Analysis Complete mailing-list
- 20030126 Tool: Sapphire SQL Worm Scanner mailing-list
- 20030128 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030128 Re: MSDE contained in... mailing-list
- 20030129 Re: MSDE contained in... mailing-list
- 20030130 RE: MSDE contained in... mailing-list
- 20030201 The Spread of the Sapphire/Slammer SQL Worm mailing-list
- 5310 vdb-entry
- MS02-039 vendor-advisory
- oval:org.mitre.oval:def:1077 signature vdb-entry