CVE-2002-0942
Lumigent Log Explorer < 3.01 - Buffer Overflow via Extended Stored Procedures
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-0942. PoCs published by Martin Rakhmanoff.
AI-analyzed exploit summary The exploit demonstrates a buffer overflow in the xp_logattach_StartProf stored procedure of Lumigent Log Explorer's xp_logattach.dll. By passing an oversized string (800 bytes of 'A'), it overwrites memory, potentially leading to arbitrary code execution in the context of the SQL Server process.
Description
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartProf, (2) xp_logattach_setport, or (3) xp_logattach.
Exploits (2)
The exploit demonstrates a buffer overflow in the xp_logattach_StartProf stored procedure of Lumigent Log Explorer's xp_logattach.dll. By passing an oversized string (800 bytes of 'A'), it overwrites memory, potentially leading to arbitrary code execution in the context of the SQL Server process.
This exploit demonstrates a buffer overflow vulnerability in Lumigent Log Explorer's xp_logattach_setport stored procedure. By passing an oversized string (800 bytes) to the procedure, an attacker can overwrite memory locations, potentially leading to remote code execution as the SQL server process.