CVE-2002-0649
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft...
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
- Record
CVE-2002-0649- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
- Record
CVE-2002-0649- Updated
- 2026-11-02
EUVDEUVD-2002-0643 No score
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
- Record
EUVD-2002-0643- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8jr-r79v-cghp No score
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft...
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
- Record
GHSA-r8jr-r79v-cghp- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit) | 2010-04-30 |
| Exploit-DB | Microsoft SQL Server 2000 - Resolution Service Heap Overflow | 2002-07-25 |
| Metasploit | MS02-039 Microsoft SQL Server Resolution Overflow | 2002-07-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0649 is a high vulnerability (CVSS 7.5) in Microsoft Sql Server, published July 26, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 84.8%, the 99th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/308396/30/26150/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1077
cert.org/advisories/CA-2002-22.html
kb.cert.org/vuls/id/484891
Show 19 moreShow less
marc.info?l=ntbugtraq&m=102760479902411&w=2
secunia.com/advisories/7945
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039
nvd.nist.gov/vuln/detail/CVE-2002-0649
github.com/advisories/GHSA-r8jr-r79v-cghp