7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.093 Low
EPSS
Percentile
94.6%
Microsoft SQL Server contains several buffer overflows in “functions that are associated with connecting to remote data sources through ‘ad hoc names.’”
Microsoft SQL Server versions 7.0 and 2000 contain buffer overflows in the openrowset and opendatasource macros. By calling these macros with an overly long provider name parameter, an intruder can interrupt the ordinary operation of the server or potentially execute arbitrary code with the privileges of the SQL server. For more information, see
http://www.microsoft.com/technet/security/bulletin/MS02-007.asp
In order to exploit this vulnerability, an intruder would need to be able to call one of the vulnerable macros directly, or be able to supply an inappropriate argument to a script that uses one of the vulnerable macros.
An intruder can execute arbitrary code with the privileges of the SQL service account. If the privileges of the service account are elevated via VU#796313, this vulnerability may result in compromise of the server host.
Apply a patch as described in http://support.microsoft.com/support/misc/kblookup.asp?id=Q318268 or http://support.microsoft.com/support/misc/kblookup.asp?id=Q316333.
619707
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Additional information available
__ Sort by: Status Alphabetical
Expand all
Javascript is disabled. Click here to view vendors.
Notified: July 27, 2002 Updated: July 29, 2002
Affected
See http://www.microsoft.com/technet/security/bulletin/MS02-007.asp
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23619707 Feedback>).
Group | Score | Vector |
---|---|---|
Base | ||
Temporal | ||
Environmental |
Our thanks to Microsoft Corporation for the information provided in their bulletin, and to Cesar Cerrudo, who reported this information on Bugtraq and NTBugTraq.
This document was written by Shawn V. Hernan.
CVE IDs: | CVE-2002-0056 |
---|---|
Severity Metric: | 9.57 Date Public: |
support.microsoft.com/support/misc/kblookup.asp?id=Q318268
msdn.microsoft.com/library/en-us/acdata/ac_8_qd_12_23xd.asp
online.securityfocus.com/bid/4135
support.microsoft.com/support/misc/kblookup.asp?id=Q316333
www.microsoft.com/technet/prodtechnol/sql/maintain/security/sql2ksec.asp
www.microsoft.com/technet/security/bulletin/MS02-007.asp
www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0202&L=NTBUGTRAQ&P=R4681