exploits , vulnerabilities , articles , Microsoft SQL Server 2000 Bulk Insert Procedure Buffer Overflow Vulnerability

Title	Microsoft SQL Server 2000 Bulk Insert Procedure Buffer Overflow Vulnerability
Published	2002-05-27-12:00AM
Updated	2003-01-25-09:45PM
Class	Boundary Condition Error
CVE	CAN-2002-0641
Remote	Yes
Local	No
Credit	Microsoft credits Cesar Cerrudo and David Litchfield of Next Generation Security Software Ltd. for reporting this vulnerability
Vulnerable	Microsoft SQL Server 2000 Desktop Engine Akiva WebBoard 6.1 Microsoft Access 2000 Microsoft Application Center 2000 Microsoft BizTalk Server 2000 Developer Edition Microsoft BizTalk Server 2000 Enterprise Edition Microsoft BizTalk Server 2000 Standard Edition Microsoft BizTalk Server 2002 Developer Edition Microsoft BizTalk Server 2002 Enterprise Edition Microsoft Office 2000 Microsoft Project Central Server Microsoft SharePoint Team Services from Microsoft Microsoft Visio 2000 Enterprise Edition Microsoft Visio Enterprise Network Tools Microsoft Visual FoxPro 6.0 Microsoft Visual Studio 6.0 Microsoft Visual Studio .NET Academic Edition Microsoft Visual Studio .NET Enterprise Architect Edition Microsoft Visual Studio .NET Enterprise Developer Edition Microsoft Visual Studio .NET Professional Edition SmartMax Software MailMax 5.0 Veritas Software Backup Exec for Windows Servers 9.0 Microsoft SQL Server 2000 SP2
Not Vulnerable	Microsoft SQL Server 2000 SP3
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 ReVou Comment Field HTML Injection Vulnerability
2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities