CVE-2000-1087
The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
- Affected products
- Sql Server 2000, Sql Server Desktop Engine
- Microsoft Data Engine
- = 1.0, 2000
- Microsoft Sql Server
- = 7.0, 2000
- Fix
- Available
- CVSS 2.0
- 4.6 MEDIUM
- EPSS
- 2.8% (85th percentile)
- NVD status
- Modified
- Published
- 2000-12-19
CVE-2000-1087 at NVD
No indexed exploits for CVE-2000-1087 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2000-1087 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.