Microsoft

Data Engine

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.6

CVE-2000-1085

Exploit
  • EPSS 5.29%
  • Veröffentlicht 09.01.2001 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:53:07

The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which a...

4.6

CVE-2000-1084

Exploit
  • EPSS 2.84%
  • Veröffentlicht 09.01.2001 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:53:06

The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which all...

2.1

CVE-2000-1083

Exploit
  • EPSS 5.49%
  • Veröffentlicht 09.01.2001 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:53:06

The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows ...

4.6

CVE-2000-1082

Exploit
  • EPSS 2.84%
  • Veröffentlicht 09.01.2001 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:53:06

The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which al...

4.6

CVE-2000-1081

Exploit
  • EPSS 5.25%
  • Veröffentlicht 09.01.2001 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:53:06

The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which...

7.5

CVE-2000-0202

  • EPSS 9.52%
  • Veröffentlicht 08.03.2000 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:51:12

Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.