CVE-2001-0542

Microsoft SQL Server 7.0 and 2000 - Buffer Overflow via raiserror, formatmessage, or xp_sprintf

Title source: llm
STIX 2.1

Description

Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/7724
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=100891252317406&w=2
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/3733
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/700575
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83
Patch, Vendor Advisory vendor-advisory x_refsource_atstake
http://www.atstake.com/research/advisories/2001/a122001-1.txt

Scores

EPSS 0.1362
EPSS Percentile 96.1%

Details

Status published
Products (2)
microsoft/sql_server 7.0
microsoft/sql_server 2000
Published Dec 20, 2001
Tracked Since Feb 18, 2026