CVEvulnerability

CVE-2002-1981

5.0 MEDIUM Published 2002-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2002-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.

Affected configurations

• microsoft sql server 2000

Referenced by CWE · observed example (2)

CWE-267 Privilege Defined With Unsafe Actions weakness
CWE-269 Improper Privilege Management weakness

References

http://seclists.org/lists/bugtraq/2002/Sep/0009.html Vendor Advisory
http://www.iss.net/security_center/static/10012.php www.iss.net
http://www.ngssoftware.com/advisories/mssql-sp_MSSetServerProperties.txt Vendor Advisory
http://www.securityfocus.com/bid/5604 www.securityfocus.com
http://seclists.org/lists/bugtraq/2002/Sep/0009.html Vendor Advisory
http://www.iss.net/security_center/static/10012.php www.iss.net
http://www.ngssoftware.com/advisories/mssql-sp_MSSetServerProperties.txt Vendor Advisory
http://www.securityfocus.com/bid/5604 www.securityfocus.com

CVE-2002-1981

Description

Affected configurations

Related

Referenced by CWE · observed example (2)

References