{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2002-07-30T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2003-03-24T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "MS02-040", "tags": ["vendor-advisory", "x_refsource_MS"], "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-040"}, {"name": "5372", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/5372"}, {"name": "mssql-mdac-openrowset-bo(9734)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "http://www.iss.net/security_center/static/9734.php"}, {"tags": ["x_refsource_MISC"], "url": "http://www.nextgenss.com/advisories/mssql-ors.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2002-0695", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "MS02-040", "refsource": "MS", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-040"}, {"name": "5372", "refsource": "BID", "url": "http://www.securityfocus.com/bid/5372"}, {"name": "mssql-mdac-openrowset-bo(9734)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/9734.php"}, {"name": "http://www.nextgenss.com/advisories/mssql-ors.txt", "refsource": "MISC", "url": "http://www.nextgenss.com/advisories/mssql-ors.txt"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2002-0695", "datePublished": "2003-04-02T05:00:00", "dateReserved": "2002-07-12T00:00:00", "dateUpdated": "2003-03-24T00:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:data_access_components:1.5:*:*:*:*:*:*:*", "matchCriteriaId": "1B1985AB-FCAB-4ABC-BF03-9E11CD015596", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "0D331DB4-AA55-4E1B-8B73-14EE2F13E09E", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "A3BFD086-7F94-4482-AC27-E4FAD418B767", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.1.1.3711.11:ga:*:*:*:*:*:*", "matchCriteriaId": "ADD39E09-B345-4796-9C67-B2087F806988", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.5:*:*:*:*:*:*:*", "matchCriteriaId": "49A5B686-0B8A-4904-8166-24D899D24ED5", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.5:gold:*:*:*:*:*:*", "matchCriteriaId": "092A2E97-C8C4-4F4F-9EC1-70E64DF0052D", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.5:sp1:*:*:*:*:*:*", "matchCriteriaId": "950834D8-A6CE-4636-9ABC-47528001983D", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.5:sp2:*:*:*:*:*:*", "matchCriteriaId": "0D819A49-C10C-47C8-8A82-6CAE4FD5396D", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.6:*:*:*:*:*:*:*", "matchCriteriaId": "01EAE3CC-D507-40A4-9198-873EE0E3DCE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.6:gold:*:*:*:*:*:*", "matchCriteriaId": "CE28EB73-C986-4184-9C82-AC55432B3BA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.6:sp1:*:*:*:*:*:*", "matchCriteriaId": "9BA9FEED-B40F-4673-B9D0-265B4BDC6411", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.6:sp2:*:*:*:*:*:*", "matchCriteriaId": "7B11B6C6-D76E-4B6D-9792-89DE5569EA8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.7:*:*:*:*:*:*:*", "matchCriteriaId": "307B13E2-EB93-420B-B47E-0681864DC429", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.7:gold:*:*:*:*:*:*", "matchCriteriaId": "6FC21845-6911-4FA4-9B9A-19F533ED3E1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:data_access_components:2.12.4202.3:*:*:*:*:*:*:*", "matchCriteriaId": "D627CFF6-F877-48CB-8C86-F8EF961C08C0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:microsoft_data_access_components:2.12.4292.3_ga_clean:*:*:*:*:*:*:*", "matchCriteriaId": "2ADFE032-610E-4009-A29D-9E4E64A2427E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en el componente Transact-SQL (T-SQL) OpenRowSet de Microsoft Data Access Components (MDAC), versiones 2.5 hasta 2.7 para SQL Server 7.0 \u00f3 2000 permite que atacantes remotos ejecuten c\u00f3digo arbitrario por medio de una sentencia que llama al comando OpenRowSet."}], "id": "CVE-2002-0695", "lastModified": "2018-10-12T21:31:42.427", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2002-08-12T04:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://www.iss.net/security_center/static/9734.php"}, {"source": "cve@mitre.org", "url": "http://www.nextgenss.com/advisories/mssql-ors.txt"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/5372"}, {"source": "cve@mitre.org", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-040"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}