CVE - CVE-2002-0649

CVE-ID
CVE-2002-0649	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:5310 URL:http://www.securityfocus.com/bid/5310 BUGTRAQ:20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) URL:http://marc.info/?l=bugtraq&m=102760196931518&w=2 BUGTRAQ:20030125 Fw: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! URL:http://www.securityfocus.com/archive/1/308321/30/26180/threaded BUGTRAQ:20030125 MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! URL:http://www.securityfocus.com/archive/1/308306/30/26180/threaded BUGTRAQ:20030125 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! URL:http://www.securityfocus.com/archive/1/308393/30/26180/threaded BUGTRAQ:20030125 Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! URL:http://www.securityfocus.com/archive/1/308324/30/26180/threaded BUGTRAQ:20030125 SQL Sapphire Worm Analysis URL:http://www.securityfocus.com/archive/1/308388/30/26180/threaded BUGTRAQ:20030125 Sapphire SQL Worm Analysis Complete URL:http://www.securityfocus.com/archive/1/308418/30/26150/threaded BUGTRAQ:20030126 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! URL:http://www.securityfocus.com/archive/1/308396/30/26150/threaded BUGTRAQ:20030126 Tool: Sapphire SQL Worm Scanner URL:http://www.securityfocus.com/archive/1/308419/30/26150/threaded BUGTRAQ:20030128 RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! URL:http://www.securityfocus.com/archive/1/308760/30/26120/threaded BUGTRAQ:20030128 Re: MSDE contained in... URL:http://www.securityfocus.com/archive/1/308806/30/26120/threaded BUGTRAQ:20030129 Re: MSDE contained in... URL:http://www.securityfocus.com/archive/1/309096/30/26120/threaded BUGTRAQ:20030130 RE: MSDE contained in... URL:http://www.securityfocus.com/archive/1/309324/30/26120/threaded BUGTRAQ:20030201 The Spread of the Sapphire/Slammer SQL Worm URL:http://www.securityfocus.com/archive/1/309776/30/26090/threaded CERT:CA-2002-22 URL:http://www.cert.org/advisories/CA-2002-22.html CERT:CA-2003-04 URL:http://www.cert.org/advisories/CA-2003-04.html CERT-VN:VU#399260 URL:http://www.kb.cert.org/vuls/id/399260 CERT-VN:VU#484891 URL:http://www.kb.cert.org/vuls/id/484891 MS:MS02-039 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039 NTBUGTRAQ:20020725 Microsoft SQL Server 2000 Unauthenticated System Compromise (#NISR25072002) URL:http://marc.info/?l=ntbugtraq&m=102760479902411&w=2 OVAL:oval:org.mitre.oval:def:1077 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1077 SECUNIA:7945 URL:http://secunia.com/advisories/7945
Assigning CNA
MITRE Corporation
Date Record Created
20020628	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Modified (20080207)
Votes (Legacy)
ACCEPT(4) Baker, Cole, Foat, Wall MODIFY(1) Frech NOOP(2) Christey, Cox
Comments (Legacy)
Christey> CERT:CA-2002-22 CERT-VN:VU#399260 CERT-VN:VU#484891 Christey> XF:mssql-resolution-service-bo(9661) URL:http://www.iss.net/security_center/static/9661.php BID:5310 URL:http://www.securityfocus.com/bid/5310 BID:5311 URL:http://www.securityfocus.com/bid/5311 Christey> add to desc: "as exploited by the SQL Slammer/Sapphire worm" to facilitate matching. Frech> XF:mssql-resolution-service-bo(9661)
Proposed (Legacy)
20020726
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)