Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Msde | Microsoft | 2000 (including) | 2000 (including) |
Sql_server | Microsoft | 2000 (including) | 2000 (including) |