CVE-2002-1123
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
- Affected products
- Desktop Engine (Msde) 2000, Sql Server 2000
- Microsoft Data Engine
- = 2000
- Microsoft Sql Server
- = 2000
- Fix
- Available
- CVSS 2.0
- 7.5 HIGH
- EPSS
- 77.7% (100th percentile)
- NVD status
- Modified
- Published
- 2004-09-01
CVE-2002-1123 at NVD
10 known exploits for CVE-2002-1123
Proof-of-concept code and exploit modules indexed by Sploitus
Microsoft SQL Server - Hello Overflow (MS02-056) (Metasploit)
Microsoft SQL Server Hello Overflow
Microsoft SQL Server Hello buffer overflow
Microsoft SQL Server Hello buffer overflow
Microsoft SQL Server Hello buffer overflow
Microsoft SQL Server Hello buffer overflow
MS02-056 Microsoft SQL Server Hello Overflow
Immunity Canvas: MSSQLHELLO
Immunity Canvas: MSSQLRESOLVESTACK
Microsoft SQL Server 2000 - User Authentication Remote Buffer Overflow