CVE-2002-0650: Microsoft SQL Server

Medium severity, CVSS 5.0. EPSS: 18.3% chance of exploitation in the next 30 days.

The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.

Affected products

• Microsoft SQL Server: version 2000 only

Published 2002-08-12. Last modified 2026-06-16.