Unscored severity · published Dec 20, 2001
CVE-2001-0542
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage,…
–
CVSS
13.6%
EPSS
No
On KEV
Description
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Sql Server · Microsoft
7.0; 2000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0542
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0542
marc.info
http://marc.info/?l=bugtraq&m=100891252317406&w=2
Patch
http://www.atstake.com/research/advisories/2001/a122001-1.txt
US Government Resource
http://www.kb.cert.org/vuls/id/700575
Patch
http://www.securityfocus.com/bid/3733
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7724
More from Sql Server
8.8
CVE-2020-0618
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
8.8
CVE-2019-1068
Microsoft SQL Server Remote Code Execution Vulnerability
8.8
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
9.8
CVE-2018-8273
A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution…
8.8
CVE-2023-38169
Microsoft SQL OLE DB Remote Code Execution Vulnerability