Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-07-26T04:00:00

Updated: 2024-08-08T02:56:38.432Z

Reserved: 2002-06-28T00:00:00

Link: CVE-2002-0649

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2002-08-12T04:00:00.000

Modified: 2024-11-20T23:39:33.020

Link: CVE-2002-0649

cve-icon Redhat

No data.