CVEvulnerability

CVE-2002-0721

10.0 HIGH Published 2002-09-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-09-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.

Affected configurations

• microsoft data engine 1.0 • microsoft data engine 2000 • microsoft sql server 7.0 • microsoft sql server 2000

References