Login Request a demo
Unscored severity · published Sep 5, 2002
CVE-2002-0859
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code
–
CVSS
26.2%
EPSS
No
On KEV
Description
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)26.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JE
Jet · Microsoft
4.0; 4.0; 4.0; 4.0; 4.0; 4.0 · source: NVD
SS
Sql Server · Microsoft
2000; 2000; 2000 · source: NVD
Affected product
JE
Jet
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0859
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0859
marc.info
http://marc.info/?l=bugtraq&m=102450188620081&w=2
support.microsoft.com
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010
www.iss.net
http://www.iss.net/security_center/static/9375.php
www.nextgenss.com
http://www.nextgenss.com/advisories/mssql-ods.txt
www.securityfocus.com
http://www.securityfocus.com/bid/5057
More from Jet
–
CVE-2008-1200
Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll)
–
CVE-2007-6026
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to…
–
CVE-2005-0944
Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a…
–
CVE-2004-0197
Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query
–
CVE-2000-0325
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability