7.5
CVE-2002-0056
- EPSS 24.86%
- Veröffentlicht 08.03.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:56:40
- Erkennungen
LoginBuffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Sql Server Version 7.0
Microsoft ≫ Sql Server Version 2000
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 24.86% | 0.976 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=101422555428036&w=2
http://marc.info/?l=vuln-dev&m=101413924631329&w=2
http://www.kb.cert.org/vuls/id/619707
http://www.securityfocus.com/bid/4135
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-007
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A271