Description
Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
References
- VU#627275 third-party-advisory
- CA-2002-22 third-party-advisory
- oval:org.mitre.oval:def:121 vdb-entry signature
- 20020305 Another Sql Server 7 Buffer Overflow mailing-list
- 20020312 Many, many, many Sql Server 7 & 2000 Buffer Overflows mailing-list
- MS02-020 vendor-advisory