Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2002-0649

CVSS 7.5 4 detections found
View on NVD →
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.

Detection rules

Source Rule Status Updated
suricata GPL SQL Slammer Worm propagation attempt rev 9 2019-07-26
suricata GPL WORM Slammer Worm propagation attempt OUTBOUND rev 8 2019-07-26
snort GPL SQL Slammer Worm propagation attempt rev 9 2011-04-21
snort GPL WORM Slammer Worm propagation attempt OUTBOUND rev 8 2011-04-21