CVE-2002-0859

CVE-2002-0859 describes a critical buffer overflow vulnerability in the OpenDataSource function of the Microsoft Jet engine, specifically impacting Microsoft SQL Server 2000. This flaw allows unauthenticated remote attackers to execute arbitrary code on affected systems. With a CVSS score of 7.5, it presents a high risk due to its network-based attack vector and low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog or showing active exploitation, a Proof-of-Concept exploit is publicly available on ExploitDB, and it has a high FAUCET Risk Score, indicating significant potential for exploitation. Despite its age, there is minimal community discussion or media coverage surrounding this vulnerability.