Lucene search

[email protected]CVE-2002-0695

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0695

2002-08-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-0695

buffer overflow

t-sql

openrowset

mdac

sql server 7.0

sql server 2000

remote code execution

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.074 Low

EPSS

Percentile

94.0%

JSON

Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.

CPENameOperatorVersion
microsoft:data_access_componentsmicrosoft data access componentseq2.0
microsoft:data_access_componentsmicrosoft data access componentseq2.5
microsoft:data_access_componentsmicrosoft data access componentseq2.6
microsoft:data_access_componentsmicrosoft data access componentseq2.12.4202.3
microsoft:data_access_componentsmicrosoft data access componentseq2.7
microsoft:microsoft_data_access_componentsmicrosoft microsoft data access componentseq2.12.4292.3_ga_clean
microsoft:data_access_componentsmicrosoft data access componentseq1.5
microsoft:data_access_componentsmicrosoft data access componentseq2.1
microsoft:data_access_componentsmicrosoft data access componentseq2.1.1.3711.11

CPE	Name	Operator	Version
microsoft:data_access_components	microsoft data access components	eq	2.0
microsoft:data_access_components	microsoft data access components	eq	2.5
microsoft:data_access_components	microsoft data access components	eq	2.6
microsoft:data_access_components	microsoft data access components	eq	2.12.4202.3
microsoft:data_access_components	microsoft data access components	eq	2.7
microsoft:microsoft_data_access_components	microsoft microsoft data access components	eq	2.12.4292.3_ga_clean
microsoft:data_access_components	microsoft data access components	eq	1.5
microsoft:data_access_components	microsoft data access components	eq	2.1
microsoft:data_access_components	microsoft data access components	eq	2.1.1.3711.11

References

www.iss.net/security_center/static/9734.php

www.nextgenss.com/advisories/mssql-ors.txt

www.securityfocus.com/bid/5372

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-040

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.074 Low

EPSS

Percentile

94.0%

JSON

Related for CVE-2002-0695

nessus1