CVE:CVE-2000-1086
CNNVD:CNNVD-200101-016
Microsoft SQL Server 2000和 SQL服务器桌面引擎(MSDE)在调用 Extended Stored Procedures (XP)的srv_paraminfo函数前不正确限制缓冲区长度。攻击者可以利用该漏洞导致服务拒绝或执行任意命令，也称为"Extended Stored Procedure Parameter Parsing"漏洞。
solution:Upgrade microsoft data_engine to a higher version than 1.0,2000,and avoid the version 1.0,2000; Upgrade microsoft sql_server to a higher version than 7.0,2000,and avoid the version 7.0,2000