CVE

Id
2656  
CVE No.
CVE-2000-1088  
Status
Candidate  
Description
The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.  
Phase
Proposed (20001219)  
Votes
ACCEPT(4) Baker, Cole, Magdych, Wall | MODIFY(1) Frech | REVIEWING(1) Christey  
Comments
Christey> CVE-2000-1085, CVE-2000-1086, CVE-2000-1087, and CVE-2000-1088 | all have abstraction issues; perhaps they should be RECAST | into a single candidate. | Christey> ADDREF XF:mssql-xp-paraminfo-bo | URL:http://xforce.iss.net/static/5622.php | Frech> XF:mssql-xp-paraminfo-bo(5622)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
10418 2656 CVE-2000-1088 ATSTAKE:20001201 SQL Server 2000 Extended Stored Procedure Vulnerability  View
10419 2656 CVE-2000-1088 URL:http://marc.info/?l=bugtraq&m=97570884410184&w=2  View
10420 2656 CVE-2000-1088 MS:MS00-092  View
10421 2656 CVE-2000-1088 URL:http://www.microsoft.com/technet/security/bulletin/ms00-092.asp  View
10422 2656 CVE-2000-1088 BID:2043  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64319 JVNDB-2000-000099 Microsoft SQL Server の xp_SetSQLSecurity() 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2000-1088 2656 4.6 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000099.html  View