Every CVE Search/ Get API key

CVE-2002-0644

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000...

7.5 HighPublic exploit

CVE-2002-0644 is a high vulnerability (CVSS 7.5) in Microsoft Sql Server, published July 26, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. No source names a fixed version.

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Exploit likelihood

11.4%Up 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Record
CVE-2002-0644
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Record
CVE-2002-0644
Updated
2026-11-02
EUVDEUVD-2002-0638 No score

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Record
EUVD-2002-0638
Updated
2026-11-03
GitHub AdvisoriesGHSA-6w62-442x-wvg8 No score

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000...

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Record
GHSA-6w62-442x-wvg8
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMicrosoft SQL Server 2000 - Database Consistency Checkers Buffer Overflow2002-07-25

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD

References

MoveEnter Open