Sploitus

Exploit for Microsoft SQL Server 2000 resolution service buffer overflow

CVE-2002-0649

saint · 2006-02-05

Exploit Code

MARKDOWN27 lines
## https://sploitus.com/exploit?id=SAINT:37FD85A530B4F8217456BEFB6F5380C1
Added: 02/05/2006  
CVE: CVE-2002-0649  
BID: 5310  
OSVDB: 4577  


### Background

Microsoft SQL Server is a database server package for Windows platforms. SQL Server 2000 introduced the SQL Server Resolution Service, which runs on port 1434/UDP and identifies the port on which each SQL Server instance runs. 

### Problem

A buffer overflow vulnerability in the SQL Server Resolution Service in SQL Server 2000 allows remote attackers to execute arbitrary commands. 

### Resolution

Apply the patch referenced in Microsoft Security Bulletin 02-039. 

### References

http://www.kb.cert.org/vuls/id/399260   


### Platforms

Windows