Unscored severity · published Jul 23, 2002
CVE-2002-0641
Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration…
–
CVSS
11.2%
EPSS
No
On KEV
Description
Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Msde · Microsoft
2000 · source: NVD
SS
Sql Server · Microsoft
2000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0641
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0641
marc.info
http://marc.info/?l=bugtraq&m=102639885223746&w=2
US Government Resource
http://www.kb.cert.org/vuls/id/682620
www.ngssoftware.com
http://www.ngssoftware.com/advisories/ms-sqlbi.txt
www.securityfocus.com
http://www.securityfocus.com/bid/4847
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316
More from Msde
–
CVE-2000-1209
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages…
–
CVE-2002-0624
Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain…
–
CVE-2002-0642
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure…