ID CVE-2002-0700
Summary Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:content_management_server:2001:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:content_management_server:2001:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:content_management_server:2001:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:content_management_server:2001:sp1:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 12-10-2018 - 21:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 5420
osvdb 4862
xf mcms-authentication-bo(9783)
Last major update 12-10-2018 - 21:31
Published 12-08-2002 - 04:00
Last modified 12-10-2018 - 21:31
Back to Top