CVE

Id
2654  
CVE No.
CVE-2000-1086  
Status
Candidate  
Description
The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.  
Phase
Proposed (20001219)  
Votes
ACCEPT(4) Baker, Cole, Magdych, Wall | MODIFY(1) Frech | REVIEWING(1) Christey  
Comments
Christey> CVE-2000-1085, CVE-2000-1086, CVE-2000-1087, and CVE-2000-1088 | all have abstraction issues; perhaps they should be RECAST | into a single candidate. | Christey> ADDREF XF:mssql-xp-paraminfo-bo | URL:http://xforce.iss.net/static/5622.php | Frech> XF:mssql-xp-paraminfo-bo(5622)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
10408 2654 CVE-2000-1086 ATSTAKE:20001201 SQL Server 2000 Extended Stored Procedure Vulnerability  View
10409 2654 CVE-2000-1086 URL:http://marc.info/?l=bugtraq&m=97570884410184&w=2  View
10410 2654 CVE-2000-1086 MS:MS00-092  View
10411 2654 CVE-2000-1086 URL:http://www.microsoft.com/technet/security/bulletin/ms00-092.asp  View
10412 2654 CVE-2000-1086 BID:2041  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64317 JVNDB-2000-000097 Microsoft SQL Server の xp_printstatements() 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2000-1086 2654 4.6 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000097.html  View