CVE-2001-0542: Undefined Security Weakness

Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions 1 raiserror, 2 formatmessage, or 3 xpsprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879...

Переполнения буфера в текстовых функциях Microsoft SQL Server (buffer overflow)

Переполнения буфре а функциях raiserror, formatmessageи процедуре xpsprintf...