CVE-2002-0859

Description

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

Affected products

• Microsoft / jet4.0 – 4.0
• Microsoft / jet4.0 – 4.0
• Microsoft / jet4.0 – 4.0
• Microsoft / jet4.0 – 4.0
• Microsoft / jet4.0 – 4.0
• Microsoft / jet4.0 – 4.0
• Microsoft / sql_server2000 – 2000
• Microsoft / sql_server2000 – 2000
• Microsoft / sql_server2000 – 2000

Exploits & proofs of concept

• exploit-dbMicrosoft SQL Server 2000 / Microsoft Jet 4.0 Engine - Unicode Buffer Overflow (PoC)by NGSSoftware

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=102450188620081&w=2
• MISChttp://www.iss.net/security_center/static/9375.php
• MISChttp://www.securityfocus.com/bid/5057
• VENDOR_ADVISORYhttp://www.nextgenss.com/advisories/mssql-ods.txt
• MISChttp://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010