Vulnerability in Microsoft Data_engine

CVE-2002-0645

SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.

EPSS: 0.038 (89.0th percentile) — read the EPSS interpretation.

Affected products

Microsoft Data_engine — versions 2000
Microsoft Sql_server — versions 2000
N/a — versions n/a

References

cve@mitre.org (x_refsource_MS, vendor-advisory)