Vulnerability Description
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartProf, (2) xp_logattach_setport, or (3) xp_logattach.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Lumigent | Log Explorer | <= 3.01 |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0146.html
- http://online.securityfocus.com/archive/1/277026
- http://www.iss.net/security_center/static/9346.phpPatchVendor Advisory
- http://www.lumigent.com/LogExplorer/Support/whatsnew3_03.htm
- http://www.securityfocus.com/bid/5016ExploitVendor Advisory
- http://www.securityfocus.com/bid/5017ExploitVendor Advisory
- http://www.securityfocus.com/bid/5018ExploitVendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0146.html
- http://online.securityfocus.com/archive/1/277026
- http://www.iss.net/security_center/static/9346.phpPatchVendor Advisory
- http://www.lumigent.com/LogExplorer/Support/whatsnew3_03.htm
- http://www.securityfocus.com/bid/5016ExploitVendor Advisory
- http://www.securityfocus.com/bid/5017ExploitVendor Advisory
- http://www.securityfocus.com/bid/5018ExploitVendor Advisory
FAQ
What is CVE-2002-0942?
CVE-2002-0942 is a vulnerability with a CVSS score of 7.5 (HIGH). Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartPro...
How severe is CVE-2002-0942?
CVE-2002-0942 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-0942?
Check the references section above for vendor advisories and patch information. Affected products include: Lumigent Log Explorer.