CVE-2002-0644: Buffer Overflow

Published Jul 26, 2002

Updated

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the dbowner and dbddladmin roles to execute arbitrary code.

Affected Software

2 affected components

Microsoft SQL Server=2000

Microsoft Data Engine=2000

Event History

Jul 26, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0644?

CVE-2002-0644 has a severity rating of critical due to the potential for arbitrary code execution.

How do I fix CVE-2002-0644?

To fix CVE-2002-0644, apply the latest security patches released by Microsoft for SQL Server 2000 and MSDE 2000.

Who is affected by CVE-2002-0644?

Members of the db_owner and db_ddladmin roles in Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 are affected by CVE-2002-0644.

What are the consequences of exploiting CVE-2002-0644?

Exploiting CVE-2002-0644 can allow an attacker to execute arbitrary code on the vulnerable system.

Is CVE-2002-0644 still relevant today?

While CVE-2002-0644 is an older vulnerability, it remains relevant for legacy systems still running SQL Server 2000 or MSDE 2000.