NVD

Id
80137  
Name
CVE-2002-1145  
Description
The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-10-28  
Modified Date
2016-10-17  
Seq
2002-1145  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399452 80137 CVE-2002-1145 20021017 Microsoft SQL Server Webtasks privilege upgrade (#NISR17102002)  View
399453 80137 CVE-2002-1145 20021017 Microsoft SQL Server Webtasks privilege upgrade (#NISR17102002)  View
399454 80137 CVE-2002-1145 20030203 Microsoft SQL Server 2000 Vulnerabilities in Cisco Products - MS02-061  View
399455 80137 CVE-2002-1145 mssql-webtask-gain-privileges(10388)  View
399456 80137 CVE-2002-1145 MS02-061  View
399457 80137 CVE-2002-1145 http://www.nextgenss.com/advisories/mssql-webtasks.txt  View
399458 80137 CVE-2002-1145 5980  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63925 JVNDB-2002-000252 Microsoft SQL Serverの Web Task における任意のコードを実行される脆弱性 Microsoft SQL Server に実装されている Web Task を実行する拡張ストアドプロシージャ、および Web Task の情報を格納しているテーブルには、不適切な権限が付与されている問題があり、任意の Web Task を実行出来る脆弱性が存在します。 CVE-2002-1145 5532 CVE-2002-1145 80137 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000252.html 2002-10-17 2007-04-01 View