CVE

Id
3355  
CVE No.
CVE-2001-0542  
Status
Candidate  
Description
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.  
Phase
Modified (20061101)  
Votes
ACCEPT(5) Baker, Cole, Frech, Green, Wall | NOOP(1) Foat  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
14336 3355 CVE-2001-0542 ATSTAKE:A122001-1  View
14337 3355 CVE-2001-0542 URL:http://www.atstake.com/research/advisories/2001/a122001-1.txt  View
14338 3355 CVE-2001-0542 BUGTRAQ:20011221 @stake advisory: Multiple overflow and format string vulnerabilities in in Microsoft SQL Server  View
14339 3355 CVE-2001-0542 URL:http://marc.info/?l=bugtraq&m=100891252317406&w=2  View
14340 3355 CVE-2001-0542 MS:MS01-060  View
14341 3355 CVE-2001-0542 URL:http://www.microsoft.com/technet/security/bulletin/MS01-060.asp  View
14342 3355 CVE-2001-0542 CERT-VN:VU#700575  View
14343 3355 CVE-2001-0542 URL:http://www.kb.cert.org/vuls/id/700575  View
14344 3355 CVE-2001-0542 BID:3733  View
14345 3355 CVE-2001-0542 URL:http://www.securityfocus.com/bid/3733  View
14346 3355 CVE-2001-0542 OVAL:oval:org.mitre.oval:def:83  View
14347 3355 CVE-2001-0542 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:83  View
14348 3355 CVE-2001-0542 XF:mssql-text-message-bo(7724)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64215 JVNDB-2001-000189 Microsoft SQL Server の複数の関数におけるバッファオーバーフローの脆弱性 Microsoft SQL Server には、複数の関数内では生成されたテキストメッセージがバッファのサイズで格納可能かどうかの判断が適切に行われていないため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2001-0542 3355 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000189.html  View