vulnwire
7.5high

CVE-2002-0624in critical feed1 exploit

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
22.8%
percentile 98%
Public exploits
1
Exploit-DB

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."

Exploit prediction (EPSS)

22.84% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-21549 Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow · local · 2002-06-14

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Technology feeds
Microsoft SQL Server (RSS, critical only)

References

  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • cert.org /advisories/CA-2002-22.html · third-party-advisory, x_refsource_CERT, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2002/ms02-034 · vendor-advisory, x_refsource_MS, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.