CVE-2001-0542

None

CVSS

—

EPSS

13.6%

Published

Dec 20, 2001

CISA due date

—

The record

Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.

Affected packages

Ecosystem	Package	Introduced	Fixed