CVE-2002-2250

Sybase Adaptive Server 12.0 and 12.5 - Remote Code Execution via xp_freedll or DBCC CHECKVERIFY Buffer Overflow

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.

References (10)

Core 10
Core References
Various Sources mailing-list x_refsource_bugtraq
http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00361.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10721
Third Party Advisory mailing-list x_refsource_ntbugtraq
http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0082.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6269
Third Party Advisory mailing-list x_refsource_ntbugtraq
http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0080.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6266
Exploit, Patch mailing-list x_refsource_bugtraq
http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00364.html
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10719.php

Scores

EPSS 0.0772
EPSS Percentile 93.9%

Details

CWE
CWE-119
Status published
Products (2)
sybase/adaptive_server 12.0
sybase/adaptive_server 12.5
Published Dec 31, 2002
Tracked Since Feb 18, 2026