CVE-2002-0645

Description

SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.

Affected products

• microsoft / data_engine2000 – 2000
• microsoft / sql_server2000 – 2000

References

• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038