CVE-2002-0641

critical

Description

Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034

http://www.securityfocus.com/bid/4847

http://www.ngssoftware.com/advisories/ms-sqlbi.txt

http://www.kb.cert.org/vuls/id/682620

http://marc.info/?l=bugtraq&m=102639885223746&w=2

Details

Source: Mitre, NVD

Published: 2002-07-23

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.1641