Vulnerability in Microsoft Data_engine
CVE-2000-1087
The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedu…
EPSS: 0.028 (85.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Data_engine — versions 1.0, 2000
- Microsoft Sql_server — versions 7.0, 2000
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)