Security Advisory

CVE-2001-0542

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-02-18 05:00:00
Last updated 2024-08-08 04:21:38
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.