Unscored CVE-2002-1981 EUVD-2002-1960GHSA-4hx5-8h46-q282

Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSseta…

Published Jun 28, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.

References

5604 vdb-entry
mssql-sp-public-access(10012) vdb-entry
http://www.ngssoftware.com/advisories/mssql-sp_MSSetServerProperties.txt
20020902 Microsoft SQL Server Stored procedures [sp_MSSetServerPropertiesn and sp_MSsetalertinfo] (#NISR03092002A) mailing-list