CveMateVulnerability intelligence

CVE-2002-0649: microsoft data_engine

CVSS: 7.5v2.0HighModified

Published 26-07-2002Last modified 08-08-2024

Vulnerability summary

CVE-2002-0649 is a high (CVSS 7.5) vulnerability in microsoft data_engine. EPSS estimates a 84.75% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

57/100

0100

High · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

84.75%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3exploit-database, metasploit

Timeline

26-07-2002
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

84.75%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 84.75% on 20-09-2026

20-09-202620-10-2026

EPSS score

84.75%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotewindowsVerified
Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft SQL Server 2000 - Resolution Service Heap Overflow
Maturity: weaponized
MetasploitremoteVerified
MS02-039 Microsoft SQL Server Resolution Overflow
exploit/windows/mssql/ms02_039_slammer
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Microsoft2 products

data_engine2000
sql_server2000 | 2000:sp1 | 2000:sp2

1 vendor · 2 products

References

23 links

www.securityfocus.com/archive/1/308396/30/26150/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/308418/30/26150/threadedMailing ListX Refsource BUGTRAQ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1077VDB EntrySignatureX Refsource OVAL
www.cert.org/advisories/CA-2002-22.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.kb.cert.org/vuls/id/484891Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.kb.cert.org/vuls/id/399260Third Party AdvisoryX Refsource CERT VNUS Government Resource
marc.info?l=ntbugtraq&m=102760479902411&w=2Mailing ListX Refsource NTBUGTRAQ
secunia.com/advisories/7945Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/308806/30/26120/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/308324/30/26180/threadedMailing ListX Refsource BUGTRAQ

Show all 23 references

www.securityfocus.com/archive/1/308388/30/26180/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/308306/30/26180/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/308321/30/26180/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/308760/30/26120/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/309096/30/26120/threadedMailing ListX Refsource BUGTRAQ
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039Vendor AdvisoryX Refsource MS
www.securityfocus.com/archive/1/308419/30/26150/threadedMailing ListX Refsource BUGTRAQ
marc.info?l=bugtraq&m=102760196931518&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/308393/30/26180/threadedMailing ListX Refsource BUGTRAQ
www.cert.org/advisories/CA-2003-04.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/bid/5310VDB EntryX Refsource BID
www.securityfocus.com/archive/1/309324/30/26120/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/309776/30/26090/threadedMailing ListX Refsource BUGTRAQ