CVE-2002-0649 : Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 200

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.

Published 2002-08-12 04:00:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2002-0649

Microsoft » Sql Server » Version: 2000
cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
Matching versions
Microsoft » Sql Server » Version: 2000 Update SP1
cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Sql Server » Version: 2000 Update SP2
cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Data Engine » Version: 2000
cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2002-0649

Top countries where our scanners detected CVE-2002-0649

Top open port discovered on systems with this issue 1433

IPs affected by CVE-2002-0649 337

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2002-0649!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2002-0649

EPSS FAQ

87.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2002-0649

MS02-039 Microsoft SQL Server Resolution Overflow

Disclosure Date: 2002-07-24

First seen: 2020-04-26

exploit/windows/mssql/ms02_039_slammer

This is an exploit for the SQL Server 2000 resolution service buffer overflow. This overflow is triggered by sending a udp packet to port 1434 which starts with 0x04 and is followed by long string terminating with a colon and a number. This module should wo

More information

CVSS scores for CVE-2002-0649

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2002-0649

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2002-0649

Jump to

Vulnerability Details : CVE-2002-0649