Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/12/2001 Updated: 12/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft sql server 2000
microsoft sql server 7.0

NVD-CWE-Other http://www.atstake.com/research/advisories/2001/a122001-1.txt http://www.securityfocus.com/bid/3733 http://www.kb.cert.org/vuls/id/700575 http://marc.info/?l=bugtraq&m=100891252317406&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83 https://exchange.xforce.ibmcloud.com/vulnerabilities/7724 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/700575

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-0542

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect