CVE

Id
5524  
CVE No.
CVE-2002-1137  
Status
Entry  
Description
Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
29954 5524 CVE-2002-1137 MISC:http://www.scan-associates.net/papers/foxpro.txt  View
29955 5524 CVE-2002-1137 MS:MS02-056  View
29956 5524 CVE-2002-1137 URL:http://www.microsoft.com/technet/security/bulletin/ms02-056.asp  View
29957 5524 CVE-2002-1137 CISCO:20030203 Microsoft SQL Server 2000 Vulnerabilities in Cisco Products - MS02-061  View
29958 5524 CVE-2002-1137 URL:http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml  View
29959 5524 CVE-2002-1137 CIAC:N-003  View
29960 5524 CVE-2002-1137 URL:http://www.ciac.org/ciac/bulletins/n-003.shtml  View
29961 5524 CVE-2002-1137 XF:mssql-dbcc-bo-variant(10255)  View
29962 5524 CVE-2002-1137 URL:http://xforce.iss.net/xforce/xfdb/10255  View
29963 5524 CVE-2002-1137 BID:5877  View

Related JVN