Buffer Overflow Vulnerability in Microsoft SQL Server 2000 and MSDE

CVE-2000-1085

Summary

The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) is susceptible to a buffer overflow due to improper restriction on buffer length. This vulnerability occurs during the processing of parameters passed to the srv_paraminfo function, which is part of the SQL Server API for Extended Stored Procedures (XP). An attacker can exploit this weakness to cause a denial of service or execute arbitrary commands on the affected system, thereby compromising the integrity and availability of the database service.

References