CVE

Id
5040  
CVE No.
CVE-2002-0650  
Status
Entry  
Description
The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26197 5040 CVE-2002-0650 BUGTRAQ:20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002)  View
26198 5040 CVE-2002-0650 URL:http://marc.info/?l=bugtraq&m=102760196931518&w=2  View
26199 5040 CVE-2002-0650 NTBUGTRAQ:20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002)  View
26200 5040 CVE-2002-0650 URL:http://marc.info/?l=ntbugtraq&m=102760479902411&w=2  View
26201 5040 CVE-2002-0650 MS:MS02-039  View
26202 5040 CVE-2002-0650 URL:http://www.microsoft.com/technet/security/bulletin/ms02-039.asp  View
26203 5040 CVE-2002-0650 XF:mssql-resolution-keepalive-dos(9662)  View
26204 5040 CVE-2002-0650 URL:http://www.iss.net/security_center/static/9662.php  View
26205 5040 CVE-2002-0650 BID:5312  View
26206 5040 CVE-2002-0650 URL:http://www.securityfocus.com/bid/5312  View
26207 5040 CVE-2002-0650 OSVDB:878  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63840 JVNDB-2002-000167 Microsoft SQL Server の Resolution Service におけるサービス運用妨害 (DoS) の脆弱性 Microsoft SQL Server の Resolution Service において、keep-alive 機能を利用するパケットが不正に作成されている場合に、サービス運用妨害 (DoS) 状態が発生する脆弱性が存在します。 CVE-2002-0650 5040 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000167.html  View