NVD

Id
78007  
Name
CVE-2001-0542  
Description
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-12-20  
Modified Date
2016-10-17  
Seq
2001-0542  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
390592 78007 CVE-2001-0542 20011221 @stake advisory: Multiple overflow and format string vulnerabilities in in Microsoft SQL Server  View
390593 78007 CVE-2001-0542 oval:org.mitre.oval:def:83  View
390594 78007 CVE-2001-0542 A122001-1  View
390595 78007 CVE-2001-0542 VU#700575  View
390596 78007 CVE-2001-0542 MS01-060  View
390597 78007 CVE-2001-0542 3733  View
390598 78007 CVE-2001-0542 mssql-text-message-bo(7724)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64215 JVNDB-2001-000189 Microsoft SQL Server の複数の関数におけるバッファオーバーフローの脆弱性 Microsoft SQL Server には、複数の関数内では生成されたテキストメッセージがバッファのサイズで格納可能かどうかの判断が適切に行われていないため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2001-0542 3355 CVE-2001-0542 78007 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000189.html 2001-12-21 2007-04-01 View