CVE-2002-1981: Microsoft SQL Server

Medium severity, CVSS 5.0. EPSS: 4.6% chance of exploitation in the next 30 days.

Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.

Affected products

• Microsoft SQL Server: version 2000 only

Published 2002-12-31. Last modified 2026-06-16.