NVD

Id
79649  
Name
CVE-2002-0649  
Description
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-08-12  
Modified Date
2016-10-17  
Seq
2002-0649  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
397294 79649 CVE-2002-0649 20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002)  View
397295 79649 CVE-2002-0649 20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002)  View
397296 79649 CVE-2002-0649 oval:org.mitre.oval:def:1077  View
397297 79649 CVE-2002-0649 CA-2002-22  View
397298 79649 CVE-2002-0649 CA-2003-04  View
397299 79649 CVE-2002-0649 VU#399260  View
397300 79649 CVE-2002-0649 VU#484891  View
397301 79649 CVE-2002-0649 MS02-039  View
397302 79649 CVE-2002-0649 20030125 MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!  View
397303 79649 CVE-2002-0649 20030125 Fw: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!  View
397304 79649 CVE-2002-0649 20030125 Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!  View
397305 79649 CVE-2002-0649 20030125 SQL Sapphire Worm Analysis  View
397306 79649 CVE-2002-0649 20030125 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!  View
397307 79649 CVE-2002-0649 20030126 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!  View
397308 79649 CVE-2002-0649 20030125 Sapphire SQL Worm Analysis Complete  View
397309 79649 CVE-2002-0649 20030126 Tool: Sapphire SQL Worm Scanner  View
397310 79649 CVE-2002-0649 20030128 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!  View
397311 79649 CVE-2002-0649 20030128 Re: MSDE contained in...  View
397312 79649 CVE-2002-0649 20030129 Re: MSDE contained in...  View
397313 79649 CVE-2002-0649 20030130 RE: MSDE contained in...  View
397314 79649 CVE-2002-0649 20030201 The Spread of the Sapphire/Slammer SQL Worm  View
397315 79649 CVE-2002-0649 5310  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63839 JVNDB-2002-000166 Microsoft SQL Server の Resolution サービスにおけるバッファオーバーフローの脆弱性 Microsoft SQL Server の Resolution サービスにおいて、受信したデータサイズのチェックに不備があり、これを利用した場合に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0649 5039 CVE-2002-0649 79649 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000166.html 2002-07-24 2007-04-01 View