CVE-2002-1123
Microsoft SQL Server 2000 and MSDE 2000 - Remote Code Execution via Long TCP Port 1433 Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-1123.
PoCs published by Metasploit, Dave Aitel, MC, including Metasploit module exploits/windows/mssql/ms02_056_hello.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Microsoft SQL Server 2000/MSDE via a malformed packet sent to TCP port 1433, allowing unauthenticated remote code execution with SYSTEM privileges.
Description
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
Exploits (3)
This is a Metasploit module exploiting a buffer overflow in Microsoft SQL Server 2000/MSDE via a malformed packet sent to TCP port 1433, allowing unauthenticated remote code execution with SYSTEM privileges.
This NASL script tests for the 'Hello Overflow' vulnerability in Microsoft SQL Server by sending a malformed login request with a long string to trigger a buffer overflow. The exploit targets TCP port 1433 and can potentially allow remote code execution as the SQL Server process.
This Metasploit module exploits a buffer overflow in Microsoft SQL Server 2000/MSDE via a malformed packet sent to TCP port 1433, allowing unauthenticated remote code execution with SYSTEM privileges. The exploit constructs a crafted payload with specific return addresses to trigger the overflow.