Lucene search
HistorySep 24, 2002 - 4:00 a.m.
CVE-2002-1123
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.961
Percentile
99.5%
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the “Hello” overflow.
Affected configurations
Node
microsoftdata_engineMatch2000
ORmicrosoftsql_serverMatch2000
ORmicrosoftsql_serverMatch2000sp1
ORmicrosoftsql_serverMatch2000sp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | data_engine | 2000 | cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:* |
| microsoft | sql_server | 2000 | cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:* |
| microsoft | sql_server | 2000 | cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:* |
| microsoft | sql_server | 2000 | cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:* |
Related
canvas
canvas
Immunity Canvas: MSSQLHELLO
2002-09-24 00:00:00
Immunity Canvas: MSSQLRESOLVESTACK
2002-09-24 00:00:00
openvas
openvas
Microsoft SQL Server (MSSQL) Hello Overflow Vulnerability (Q316333) - Active Check
2005-11-03 00:00:00
Microsoft
2005-11-03 00:00:00
saint
saint
Microsoft SQL Server Hello buffer overflow
2006-08-07 00:00:00
Microsoft SQL Server Hello buffer overflow
2006-08-07 00:00:00
Microsoft SQL Server Hello buffer overflow
2006-08-07 00:00:00
cve
cve
CVE-2002-1123
2004-09-01 04:00:00
nessus
nessus
Microsoft SQL Server Authentication Function Remote Overflow
2002-08-07 00:00:00
exploitdb
exploitdb
Microsoft SQL Server - Hello Overflow (MS02-056) (Metasploit)
2010-04-30 00:00:00
Microsoft SQL Server 2000 - User Authentication Remote Buffer Overflow
2002-08-06 00:00:00
checkpoint_advisories
checkpoint_advisories
MS-SQL Server Protocol - General Settings - Ver2 (CVE-2002-1123)
2014-01-07 00:00:00
Microsoft MSDE Long TCP Request Buffer Overflow - Ver2 (CVE-2002-1123)
2014-02-03 00:00:00
MS-SQL Server Protocol - General Settings (CAN-2000-1209; CVE-2002-1123)
2005-02-01 00:00:00
metasploit
metasploit
MS02-056 Microsoft SQL Server Hello Overflow
2006-01-16 03:48:36
cvelist
cvelist
CVE-2002-1123
2004-09-01 04:00:00
packetstorm
packetstorm
Microsoft SQL Server Hello Overflow
2009-11-26 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.961
Percentile
99.5%
Related for NVD:CVE-2002-1123