VULNERABILITY INTELLIGENCE

CVE-2002-0641

CVSS score7.5 HIGH
EPSS probability11.24%
CISA KEVNot currently listed
Published2002-07-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.

Primary references