CVE-2002-0154

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 24.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-05-16 · updated 2026-06-16

Description

Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.

Affected products

Microsoft SQL Server: 7.0, 7.0-sp1, 7.0-sp2, 7.0-sp3, 2000, 2000-sp1 (+1)

References

http://marc.info/?l=bugtraq&m=101535353331625&w=2
http://www.cert.org/advisories/CA-2002-22.html
http://www.kb.cert.org/vuls/id/627275
http://www.securityfocus.com/archive/1/261775
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-020
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A121
http://marc.info/?l=bugtraq&m=101535353331625&w=2
http://www.cert.org/advisories/CA-2002-22.html
http://www.kb.cert.org/vuls/id/627275
http://www.securityfocus.com/archive/1/261775
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-020
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A121

Get alerted when CVE-2002-0154 or the next vulnerability affects your stack