CVE-2002-1123

This is a Metasploit module exploiting a buffer overflow in Microsoft SQL Server 2000/MSDE via a malformed packet sent to TCP port 1433, allowing unauthenticated remote code execution with SYSTEM privileges.

This NASL script tests for the 'Hello Overflow' vulnerability in Microsoft SQL Server by sending a malformed login request with a long string to trigger a buffer overflow. The exploit targets TCP port 1433 and can potentially allow remote code execution as the SQL Server process.

This Metasploit module exploits a buffer overflow in Microsoft SQL Server 2000/MSDE via a malformed packet sent to TCP port 1433, allowing unauthenticated remote code execution with SYSTEM privileges. The exploit constructs a crafted payload with specific return addresses to trigger the overflow.