CVE-2002-0186: microsoft sql_server
Vulnerability summary
CVE-2002-0186 is a high (CVSS 7.5) vulnerability in microsoft sql_server. EPSS estimates a 55.45% chance of exploitation in the next 30 days, higher than 99% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 02-04-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
55.45%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 55.45% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft SQL Server 2000 - 'SQLXML' Buffer Overflow (PoC)
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- sql_server2000 | 2000:sp1 | 2000:sp2
1 vendor · 1 product
References
9 links- archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.htmlMailing ListX Refsource VULNWATCHPatchVendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030Vendor AdvisoryX Refsource MS- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A484VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A489VDB EntrySignatureX Refsource OVAL