Buffer Overflow Vulnerability in SQL Server and MSDE by Microsoft

CVE-2000-1084

Summary

The vulnerability arises from the xp_updatecolvbm function in SQL Server and MSDE failing to adequately restrict buffer length during the srv_paraminfo function call. This design flaw enables attackers to exploit the system, leading to potential denial of service or unauthorized execution of arbitrary commands through Extended Stored Procedures. The affected systems are put at risk, necessitating urgent patching and mitigation strategies to safeguard against exploitation.

References