VDB
CVE-2002-0649
CVE-2002-0649
PUBLISHED
CVSS 7.5 HIGH
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
EPSS 86.09% · 99.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
86.09%
99.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | data_engine | 2000, 2000, 2000 |
| microsoft | sql_server | 2000, 2000, 2000 |
| n/a | n/a | n/a, n/a |
Timeline
- CVE Published
- Aug 1, 2003 VulnCheck KEV Exploitation
- Apr 30, 2010 PoC Published
- Sep 23, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- http://www.cert.org/advisories/CA-2002-22.html advisory
- 20030126 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030125 Sapphire SQL Worm Analysis Complete mailing-list
- oval:org.mitre.oval:def:1077 vdb
- VU#484891 third-party-advisory
- VU#399260 third-party-advisory
- 20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) mailing-list
- 7945 third-party-advisory
- 20030128 Re: MSDE contained in... mailing-list
- 20030125 Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030125 SQL Sapphire Worm Analysis mailing-list
- 20030125 MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030125 Fw: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030128 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- 20030129 Re: MSDE contained in... mailing-list
- MS02-039 vendor-advisory
- 20030126 Tool: Sapphire SQL Worm Scanner mailing-list
- 20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) mailing-list
- 20030125 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! mailing-list
- CA-2003-04 third-party-advisory
…and 4 more