CVE-2002-0641
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 11%
exploitation probability
11%top 4% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
Affected products
n/a · n/aReferences
http://marc.info/?l=bugtraq&m=102639885223746&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316http://www.kb.cert.org/vuls/id/682620http://www.ngssoftware.com/advisories/ms-sqlbi.txthttp://www.securityfocus.com/bid/4847