Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0859. PoCs published by NGSSoftware.
AI-analyzed exploit summary This exploit demonstrates a Unicode-based buffer overflow in Microsoft SQL Server's OpenDataSource function via the MS Jet Engine. It overwrites the saved return address to execute arbitrary shellcode, specifically calling CreateFile() to create a file on the target system.
Description
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
Exploits (1)
This exploit demonstrates a Unicode-based buffer overflow in Microsoft SQL Server's OpenDataSource function via the MS Jet Engine. It overwrites the saved return address to execute arbitrary shellcode, specifically calling CreateFile() to create a file on the target system.