NVD

Id
77319  
Name
CVE-2000-1086  
Description
The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-01-09  
Modified Date
2016-10-17  
Seq
2000-1086  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
388398 77319 CVE-2000-1086 20001201 SQL Server 2000 Extended Stored Procedure Vulnerability  View
388399 77319 CVE-2000-1086 MS00-092  View
388400 77319 CVE-2000-1086 2041  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64317 JVNDB-2000-000097 Microsoft SQL Server の xp_printstatements() 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2000-1086 2654 CVE-2000-1086 77319 4.6 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000097.html 2000-11-01 2007-04-01 View