Description
The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions.
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5980
Various Sources x_refsource_misc
http://www.nextgenss.com/advisories/mssql-webtasks.txt
Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10388.php
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103487044122900&w=2
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-061
Mailing List mailing-list
x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=103486356413404&w=2
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml
Scores
EPSS
0.0834
EPSS Percentile
94.4%
Details
Status
published
Products (4)
microsoft/data_engine
1.0
microsoft/data_engine
2000
microsoft/sql_server
7.0 (5 CPE variants)
microsoft/sql_server
2000 (3 CPE variants)
Published
Oct 28, 2002
Tracked Since
Feb 18, 2026