NVD

Id
80130  
Name
CVE-2002-1137  
Description
Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-10-11  
Modified Date
2008-09-05  
Seq
2002-1137  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399413 80130 CVE-2002-1137 N-003  View
399414 80130 CVE-2002-1137 20030203 Microsoft SQL Server 2000 Vulnerabilities in Cisco Products - MS02-061  View
399415 80130 CVE-2002-1137 MS02-056  View
399416 80130 CVE-2002-1137 http://www.scan-associates.net/papers/foxpro.txt  View
399417 80130 CVE-2002-1137 5877  View
399418 80130 CVE-2002-1137 mssql-dbcc-bo-variant(10255)  View

Related JVN