CVE

Id
4578  
CVE No.
CVE-2002-0186  
Status
Entry  
Description
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22864 4578 CVE-2002-0186 BUGTRAQ:20020613 wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting  View
22865 4578 CVE-2002-0186 URL:http://marc.info/?l=bugtraq&m=102397345410856&w=2  View
22866 4578 CVE-2002-0186 VULNWATCH:20020613 [VulnWatch] wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting  View
22867 4578 CVE-2002-0186 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html  View
22868 4578 CVE-2002-0186 MS:MS02-030  View
22869 4578 CVE-2002-0186 URL:http://www.microsoft.com/technet/security/bulletin/ms02-030.asp  View
22870 4578 CVE-2002-0186 CERT-VN:VU#811371  View
22871 4578 CVE-2002-0186 URL:http://www.kb.cert.org/vuls/id/811371  View
22872 4578 CVE-2002-0186 BID:5004  View
22873 4578 CVE-2002-0186 URL:http://www.securityfocus.com/bid/5004  View
22874 4578 CVE-2002-0186 OSVDB:5347  View
22875 4578 CVE-2002-0186 URL:http://www.osvdb.org/5347  View
22876 4578 CVE-2002-0186 OVAL:oval:org.mitre.oval:def:484  View
22877 4578 CVE-2002-0186 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:484  View
22878 4578 CVE-2002-0186 OVAL:oval:org.mitre.oval:def:489  View
22879 4578 CVE-2002-0186 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:489  View
22880 4578 CVE-2002-0186 XF:mssql-sqlxml-isapi-bo(9328)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63802 JVNDB-2002-000129 Microsoft SQLXML の ISAPI エクステンションにおけるバッファオーバーフローの脆弱性 Microsoft SQLXML には、ISAPI エクステンションの HTTP 経由データクエリの操作の実装部分に、適切にチェックが行われないバッファが存在するため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0186 4578 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000129.html  View