CVEvulnerability
CVE-2001-0542
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-12-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
Affected configurations
• microsoft sql server 7.0
• microsoft sql server 2000
References
- http://marc.info/?l=bugtraq&m=100891252317406&w=2 marc.info
- http://www.atstake.com/research/advisories/2001/a122001-1.txt Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/700575 US Government Resource
- http://www.securityfocus.com/bid/3733 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7724 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=100891252317406&w=2 marc.info
- http://www.atstake.com/research/advisories/2001/a122001-1.txt Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/700575 US Government Resource
- http://www.securityfocus.com/bid/3733 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7724 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83 oval.cisecurity.org