1. CVE-Search
  2. CVE-2002-0859
ID CVE-2002-0859
Summary Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:jet:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:jet:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:jet:4.0:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:jet:4.0:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:jet:4.0:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:jet:4.0:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:jet:4.0:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:jet:4.0:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:jet:4.0:sp4:*:*:*:*:*:*
    cpe:2.3:a:microsoft:jet:4.0:sp4:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:jet:4.0:sp5:*:*:*:*:*:*
    cpe:2.3:a:microsoft:jet:4.0:sp5:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 13-08-2018 - 21:47)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 5057
bugtraq 20020619 Microsoft SQL Server 2000 OpenDataSource Buffer Overflow (#NISR19062002)
misc http://www.nextgenss.com/advisories/mssql-ods.txt
mskb Q282010
xf mssql-jet-ods-bo(9375)
Last major update 13-08-2018 - 21:47
Published 05-09-2002 - 04:00
Last modified 13-08-2018 - 21:47
Back to Top