7.5
CVE-2002-1123
- EPSS 77.71%
- Veröffentlicht 24.09.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:58:46
- Erkennungen
LoginBuffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Data Engine Version 2000
Microsoft ≫ Sql Server Version 2000
Microsoft ≫ Sql Server Version 2000 Update sp1
Microsoft ≫ Sql Server Version 2000 Update sp2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 77.71% | 0.995 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=102873609025020&w=2
http://online.securityfocus.com/archive/1/286220
http://www.ciac.org/ciac/bulletins/n-003.shtml
http://www.iss.net/security_center/static/9788.php
http://www.securityfocus.com/bid/5411
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056