CVE-2002-0644

Description

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Affected products

• microsoft / data_engine2000 – 2000
• microsoft / sql_server2000 – 2000

Exploits & proofs of concept

• exploit-dbMicrosoft SQL Server 2000 - Database Consistency Checkers Buffer Overflowby Cesar Cerrudo

References

• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038