Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2002-0649

Published: 12/08/2002 Updated: 19/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Microsoft

Vulnerability Summary

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote malicious users to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft data engine 2000

microsoft sql server 2000

Exploits

Exploit DB: Microsoft SQL Server 2000 - Resolution Service Heap Overflow
source: wwwsecurityfocuscom/bid/5310/info A vulnerability in Microsoft SQL Server 2000 could allow remote attackers to access target hosts A problem in the SQL Server Resolution Service allows a remote attacker to execute arbitrary code on a vulnerable host The attacker could exploit a heap-based buffer overflow in the resolution serv ...
Exploit DB: Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit)
## # $Id: ms02_039_slammerrb 9179 2010-04-30 08:40:19Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...

References

CWE-119http://www.cert.org/advisories/CA-2002-22.htmlhttp://www.kb.cert.org/vuls/id/399260http://www.kb.cert.org/vuls/id/484891http://www.securityfocus.com/bid/5310http://www.cert.org/advisories/CA-2003-04.htmlhttp://secunia.com/advisories/7945http://marc.info/?l=bugtraq&m=102760196931518&w=2http://marc.info/?l=ntbugtraq&m=102760479902411&w=2https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1077https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039http://www.securityfocus.com/archive/1/309776/30/26090/threadedhttp://www.securityfocus.com/archive/1/309324/30/26120/threadedhttp://www.securityfocus.com/archive/1/309096/30/26120/threadedhttp://www.securityfocus.com/archive/1/308806/30/26120/threadedhttp://www.securityfocus.com/archive/1/308760/30/26120/threadedhttp://www.securityfocus.com/archive/1/308419/30/26150/threadedhttp://www.securityfocus.com/archive/1/308418/30/26150/threadedhttp://www.securityfocus.com/archive/1/308396/30/26150/threadedhttp://www.securityfocus.com/archive/1/308393/30/26180/threadedhttp://www.securityfocus.com/archive/1/308388/30/26180/threadedhttp://www.securityfocus.com/archive/1/308324/30/26180/threadedhttp://www.securityfocus.com/archive/1/308321/30/26180/threadedhttp://www.securityfocus.com/archive/1/308306/30/26180/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/21652/https://www.kb.cert.org/vuls/id/399260
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook