NVD

Id
77316  
Name
CVE-2000-1083  
Description
The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-05  
Published
2001-01-09  
Modified Date
2016-10-17  
Seq
2000-1083  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
388389 77316 CVE-2000-1083 20001201 Microsoft SQL Server extended stored procedure vulnerability  View
388390 77316 CVE-2000-1083 MS00-092  View
388391 77316 CVE-2000-1083 2038  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64314 JVNDB-2000-000094 Microsoft SQL Server の xp_showcolv() 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2000-1083 2651 CVE-2000-1083 77316 2.1 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000094.html 2000-11-01 2007-04-01 View