NVD

Id
79720  
Name
CVE-2002-0721  
Description
Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-09-05  
Modified Date
2016-10-17  
Seq
2002-0721  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
397708 79720 CVE-2002-0721 20020815 Alert: Microsoft Security Bulletin - MS02-043  View
397709 79720 CVE-2002-0721 20020816 Microsoft SQL Server Extended Stored Procdure privilege upgrade vulnerabilities (#NISR15002002A)  View
397710 79720 CVE-2002-0721 20020816 Microsoft SQL Server Extended Stored Procdure privilege upgrade vulnerabilities (#NISR15002002A)  View
397711 79720 CVE-2002-0721 VU#399531  View
397712 79720 CVE-2002-0721 VU#818939  View
397713 79720 CVE-2002-0721 VU#939675  View
397714 79720 CVE-2002-0721 MS02-043  View
397715 79720 CVE-2002-0721 http://www.ngssoftware.com/advisories/mssql-esppu.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63859 JVNDB-2002-000186 Microsoft SQL Server の拡張ストアドプロシージャに付与されているアクセス権の脆弱性 Microsoft SQL Server に同梱されている特定の拡張ストアドプロシージャには、不必要なアクセス権が与えられている脆弱性が存在します。 CVE-2002-0721 5111 CVE-2002-0721 79720 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000186.html 2002-08-14 2007-04-01 View