CVE-2002-0624: Buffer Overflow

Published Jul 12, 2002

Updated

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."

Affected Software

2 affected components

Microsoft SQL Server=2000

Microsoft MSDE=2000

Event History

Jul 12, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0624?

CVE-2002-0624 is considered critical due to the possibility of remote code execution.

How do I fix CVE-2002-0624?

To fix CVE-2002-0624, apply the latest security patches provided by Microsoft for SQL Server 2000 and MSDE 2000.

Who is affected by CVE-2002-0624?

CVE-2002-0624 affects users running Microsoft SQL Server 2000 and Microsoft SQL Server Desktop Engine (MSDE) 2000.

What type of attack can exploit CVE-2002-0624?

CVE-2002-0624 can be exploited through SQL Server Authentication allowing attackers to execute arbitrary code.

Is CVE-2002-0624 still relevant today?

While CVE-2002-0624 dates back to 2002, it remains relevant for legacy systems still using affected versions.