| ID |
CVE-2002-0624
|
| Summary |
Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure." |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.5 (as of 12-10-2018 - 21:31) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| oval
via4
|
| accepted | 2014-06-23T04:07:46.400-04:00 | | class | vulnerability | | contributors | | name | Yi-Fang Koh | | organization | The MITRE Corporation |
| name | Ingrid Skoog | | organization | The MITRE Corporation |
| name | Ingrid Skoog | | organization | The MITRE Corporation |
| name | Ingrid Skoog | | organization | The MITRE Corporation |
| name | Ingrid Skoog | | organization | The MITRE Corporation |
| name | Ingrid Skoog | | organization | The MITRE Corporation |
| name | Ingrid Skoog | | organization | The MITRE Corporation |
| name | Ingrid Skoog | | organization | The MITRE Corporation |
| name | Jerome Athias | | organization | McAfee, Inc. |
| | description | Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure." | | family | windows | | id | oval:org.mitre.oval:def:291 | | status | accepted | | submitted | 2003-10-10T12:00:00.000-04:00 | | title | Unchecked Buffer in Password Encryption Procedure | | version | 4 |
|
| refmap
via4
|
|
| Last major update |
12-10-2018 - 21:31 |
| Published |
23-07-2002 - 04:00 |
| Last modified |
12-10-2018 - 21:31 |
