CVE-2002-0695 Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code...
HighCVSS 7.5
EPSS 16.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft data access components | = 1.5 | No fix listed |
| Microsoft data access components | = 2.0 | No fix listed |
| Microsoft data access components | = 2.1 | No fix listed |
| Microsoft data access components | = 2.1.1.3711.11-ga | No fix listed |
| Microsoft data access components | = 2.5 | No fix listed |
| Microsoft data access components | = 2.5-gold | No fix listed |
| Microsoft data access components | = 2.5-sp1 | No fix listed |
| Microsoft data access components | = 2.5-sp2 | No fix listed |
| Microsoft data access components | = 2.6 | No fix listed |
| Microsoft data access components | = 2.6-gold | No fix listed |
| Microsoft data access components | = 2.6-sp1 | No fix listed |
| Microsoft data access components | = 2.6-sp2 | No fix listed |
| Microsoft data access components | = 2.7 | No fix listed |
| Microsoft data access components | = 2.7-gold | No fix listed |
| Microsoft data access components | = 2.12.4202.3 | No fix listed |
| microsoft data access components | = 2.12.4292.3_ga_clean | No fix listed |
References
- mssql-mdac-openrowset-bo(9734) vdb-entry
- www.nextgenss.com
- 5372 vdb-entry
- MS02-040 vendor-advisory