Lucene search

K
cveMitreCVE-2002-0644
HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0644

2002-08-1204:00:00
mitre
web.nvd.nist.gov
34
cve-2002-0644
buffer overflow
database consistency checkers
microsoft sql server
msde
arbitrary code execution
security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.005

Percentile

76.4%

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Affected configurations

Nvd
Node
microsoftdata_engineMatch2000
OR
microsoftsql_serverMatch2000
VendorProductVersionCPE
microsoftdata_engine2000cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*
microsoftsql_server2000cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.005

Percentile

76.4%

Related for CVE-2002-0644