CVE-2002-1123: Microsoft Data Engine

High severity, CVSS 7.5. EPSS: 77.7% chance of exploitation in the next 30 days.

Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.

Affected products

• Microsoft Data Engine: version 2000 only
• Microsoft SQL Server: version 2000 only

Published 2002-09-24. Last modified 2026-06-16.