CVE-2002-0641

CVE-2002-0641 describes a buffer overflow vulnerability in the bulk insert procedure of Microsoft SQL Server 2000 and Microsoft SQL Server Desktop Engine (MSDE) 2000. An attacker with database administration privileges can exploit this by providing a long filename in a BULK INSERT query, leading to arbitrary code execution. This vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector and potential for complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.