Lucene search

K
cve[email protected]CVE-2008-0086
HistoryJul 08, 2008 - 11:41 p.m.

CVE-2008-0086

2008-07-0823:41:00
CWE-119
web.nvd.nist.gov
66
cve-2008-0086
buffer overflow
microsoft sql server
remote code execution
nvd

6.8 Medium

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.

6.8 Medium

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%