CVE-2002-0942

CVE-2002-0942 describes buffer overflow vulnerabilities in Lumigent Log Explorer versions prior to 3.02. Attackers with database permissions can exploit these flaws by providing excessively long arguments to specific extended stored procedures (xp_logattach_StartProf, xp_logattach_setport, or xp_logattach), leading to arbitrary code execution. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score of 97/100 further emphasizes its critical nature. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, demonstrating proof-of-concept for two of the affected stored procedures. The CVE has garnered significant community discussion, with more mentions than 99% of all CVEs, suggesting ongoing interest despite its age.