CVE-2002-1138: High severity microsoft sql server vulnerability
Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File Handling for Scheduled Jobs."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1138?
CVE-2002-1138 is categorized as a high severity vulnerability due to its potential to allow attackers to overwrite system files.
How do I fix CVE-2002-1138?
To mitigate CVE-2002-1138, users should apply the latest security patches provided by Microsoft for SQL Server and MSDE.
What impact does CVE-2002-1138 have on my system?
CVE-2002-1138 allows attackers to execute jobs under elevated privileges, which can lead to unauthorized access and modification of critical files.
Which software versions are affected by CVE-2002-1138?
CVE-2002-1138 affects Microsoft SQL Server 7.0, Microsoft SQL Server 2000, Microsoft Data Engine 1.0, and Microsoft Desktop Engine 2000.
Who can be attacked using CVE-2002-1138?
CVE-2002-1138 poses a risk to any user with access to execute scheduled jobs on vulnerable Microsoft SQL Server or MSDE installations.