Microsoft SQL Server 2000 contains stack buffer overflow in SQL Server Resolution Service

🗓️ 26 Jul 2002 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 34 Views

Microsoft SQL Server 2000 has a buffer overflow allowing remote code execution via UDP port 1434.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2002-0649	30 Apr 201000:00	–	circl
Check Point Advisories	MS-SQL Monitor Protocol (CVE-2002-0649; CVE-2002-0650)	1 Feb 200500:00	–	checkpoint_advisories
Check Point Advisories	MSSQL 2000MSDE Resolution Buffer Overflow - Ver2 (CVE-2002-0649)	31 Mar 201400:00	–	checkpoint_advisories
Check Point Advisories	Microsoft SQL 2000 Slammer Worm Denial of Service (CVE-2002-0649)	9 Jun 201400:00	–	checkpoint_advisories
CVE	CVE-2002-0649	26 Jul 200204:00	–	cve
Cvelist	CVE-2002-0649	26 Jul 200204:00	–	cvelist
Exploit DB	Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit)	30 Apr 201000:00	–	exploitdb
Metasploit	MS02-039 Microsoft SQL Server Resolution Overflow	26 Nov 200511:16	–	metasploit
Tenable Nessus	MS02-061: Microsoft SQL Server Multiple Vulnerabilities (uncredentialed check)	25 Jan 200300:00	–	nessus
NVD	CVE-2002-0649	12 Aug 200204:00	–	nvd

Source	Link
microsoft	www.microsoft.com/technet/security/bulletin/MS02-039.asp
microsoft	www.microsoft.com/technet/security/MSDEapps.asp
microsoft	www.microsoft.com/technet/security/virus/alerts/slammer.asp
support	www.support.microsoft.com/support/misc/kblookup.asp
microsoft	www.microsoft.com/technet/prodtechnol/sql/maintain/security/sql2ksec.asp
nextgenss	www.nextgenss.com/advisories/mssql-udp.txt
nextgenss	www.nextgenss.com/vna/ms-sql.txt
online	www.online.securityfocus.com/bid/5311
cert	www.cert.org/advisories/CA-2003-04.html

08 May 2006 17:57Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

EPSS0.86095

stack buffer overflow arbitrary code execution sql server resolution service udp port 1434 unauthenticated remote access service account compromise microsoft security bulletin patch recommendation msde 2000 firewall configuration.