CVE:CVE-2000-1087
CNNVD:CNNVD-200101-084
Microsoft SQL Server 2000和SQL Server Desktop Engine (MSDE)中的xp_proxiedmetadata函数在调用Extended Stored Procedures (XP)的SQL Server API for中的srv_paraminfo函数之前不正确的限制缓冲区的长度，攻击者利用该漏洞拒绝服务或者执行任意命令，该漏洞又称为"Extended Stored Procedure Parameter Parsing"漏洞。
solution:Upgrade microsoft data_engine to a higher version than 1.0,2000,and avoid the version 1.0,2000; Upgrade microsoft sql_server to a higher version than 7.0,2000,and avoid the version 7.0,2000