CVE

Id
4548  
CVE No.
CVE-2002-0154  
Status
Candidate  
Description
Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.  
Phase
Modified (20061101)  
Votes
ACCEPT(5) Armstrong, Cole, Foat, Green, Wall | MODIFY(1) Frech | NOOP(2) Christey, Cox  
Comments
Christey> BID:4231 | URL:http://www.securityfocus.com/bid/4231 | XF:mssql-xp-dirtree-bo(8359) | URL:http://www.iss.net/security_center/static/8359.php | | Need to specifically mention xp_dirtree. | Christey> CERT:CA-2002-22 | CERT-VN:VU#627275 | Frech> XF:mssql-multiple-xp-bo(8359)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22562 4548 CVE-2002-0154 BUGTRAQ:20020305 Another Sql Server 7 Buffer Overflow  View
22563 4548 CVE-2002-0154 URL:http://marc.info/?l=bugtraq&m=101535353331625&w=2  View
22564 4548 CVE-2002-0154 BUGTRAQ:20020312 Many, many, many Sql Server 7 & 2000 Buffer Overflows  View
22565 4548 CVE-2002-0154 URL:http://www.securityfocus.com/archive/1/261775  View
22566 4548 CVE-2002-0154 MS:MS02-020  View
22567 4548 CVE-2002-0154 URL:http://www.microsoft.com/technet/security/bulletin/ms02-020.asp  View
22568 4548 CVE-2002-0154 CERT:CA-2002-22  View
22569 4548 CVE-2002-0154 URL:http://www.cert.org/advisories/CA-2002-22.html  View
22570 4548 CVE-2002-0154 CERT-VN:VU#627275  View
22571 4548 CVE-2002-0154 URL:http://www.kb.cert.org/vuls/id/627275  View
22572 4548 CVE-2002-0154 OVAL:oval:org.mitre.oval:def:121  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63770 JVNDB-2002-000097 Microsoft SQL Server の拡張ストアドプロシージャにおけるバッファオーバーフローの脆弱性 Microsoft SQL Server において拡張ストアドプロシージャに入力された文字列のチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0154 4548 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000097.html  View