CVE-2002-0624 — Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."

Back Back to CVE browser

HIGH

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."

Published Jul 12, 2002

7.5

HIGH

CVSS 2.0

EPSS 22.84%

Description

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."

Affected products

Remediation

No remediation recorded yet.

Metrics

22.84% 0.22845

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.22845

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	22.84% (0.22845)	97.67th	v5 (v2026.06.15)
Jun 15, 2026	22.84% (0.22845)	97.44th	v5 (v2026.06.15)
Feb 1, 2026	5.43% (0.05432)	89.98th	v4 (v2025.03.14)
Mar 17, 2025	7.20% (0.07198)	90.94th	v4 (v2025.03.14)
Dec 12, 2024	8.13% (0.08135)	94.60th	v3 (v2023.03.01)
May 10, 2023	8.13% (0.08135)	93.34th	v3 (v2023.03.01)
Mar 7, 2023	7.02% (0.07021)	92.86th	v3 (v2023.03.01)
Mar 6, 2023	31.13% (0.31132)	97.56th	v2 (v2022.01.01)
Feb 4, 2022	31.13% (0.31132)	96.38th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (3)

http://www.cert.org/advisories/CA-2002-22.html
third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://www.cert.org/advisories/CA-2002-22.html		third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 12, 2002

Updated Aug 8, 2024

Reserved Jun 12, 2002

Link CVE-2002-0624

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2002-0624

Red Hat

Severity n/a

Public date n/a

Links CVE-2002-0624