Vulnerability Note VU#700575
Buffer overflows in Microsoft SQL Server 7.0 and SQL Server 2000
There is a buffer overflow in Microsoft SQL Server 2000 and SQL Server 7.0 which could allow an intruder to execute arbitrary code on vulnerable systems.
Microsoft Windows SQL Server 2000 and SQL Server 7.0 contain a buffer overflow in functions associated with text messages. For more information, see
Intruders can execute arbitrary code with the privileges of the SQL server process.
Apply a patch as described in MS01-060.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft||Affected||-||21 Dec 2001|
CVSS Metrics (Learn More)
Our thanks to Microsoft for the information contained in their bulletin. Microsoft has publicly thanked Chris Anley of @Stake for reporting this issue to them.
This document was written by Shawn V. Hernan.
- CVE IDs: CAN-2001-0542
- Date Public: 20 Dec 2001
- Date First Published: 21 Dec 2001
- Date Last Updated: 09 Jan 2002
- Severity Metric: 15.19
- Document Revision: 7
If you have feedback, comments, or additional information about this vulnerability, please send us email.