Microsoft SQL Server Other Vulnerability - CVE-2002-1138 - Vulnerability Database

Microsoft SQL Server Other Vulnerability - CVE-2002-1138

High

Reference: CVE-2002-1138

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2002-1138

Title: Microsoft SQL Server Other Vulnerability

Overview:

Microsoft SQL Server 7.0 and 2000 including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000 writes output files for scheduled jobs under its own privileges instead of the entity that launched it which allows attackers to overwrite system files aka quotFlaw in Output File Handling for Scheduled Jobs.quot