| Package | Affected versions | Patched versions |
|---|---|---|
| sql server | = 2000= 7.0 |
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free