Lucene search
MitreCVE-2003-0230HistoryAug 27, 2003 - 4:00 a.m.
CVE-2003-0230
2003-08-2704:00:00
CWE-264
mitre
web.nvd.nist.gov
38
microsoft
sql server
local hijacking
vulnerability
cve-2003-0230
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.6%
Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the “Named Pipe Hijacking” vulnerability.
Affected configurations
Node
microsoftdata_engineMatch1.0
ORmicrosoftsql_serverMatch7.0
ORmicrosoftsql_serverMatch7.0sp1
ORmicrosoftsql_serverMatch7.0sp2
ORmicrosoftsql_serverMatch7.0sp3
ORmicrosoftsql_serverMatch7.0sp4
ORmicrosoftsql_serverMatch2000
ORmicrosoftsql_serverMatch2000desktop_engine
ORmicrosoftsql_serverMatch2000sp1
ORmicrosoftsql_serverMatch2000sp2
ORmicrosoftsql_serverMatch2000sp3
ORmicrosoftsql_serverMatch2000sp3a
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | data_engine | 1.0 | cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:* |
| microsoft | sql_server | 7.0 | cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:* |
| microsoft | sql_server | 7.0 | cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:* |
| microsoft | sql_server | 7.0 | cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:* |
| microsoft | sql_server | 7.0 | cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:* |
| microsoft | sql_server | 7.0 | cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:* |
| microsoft | sql_server | 2000 | cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:* |
| microsoft | sql_server | 2000 | cpe:2.3:a:microsoft:sql_server:2000:*:desktop_engine:*:*:*:*:* |
| microsoft | sql_server | 2000 | cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:* |
| microsoft | sql_server | 2000 | cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2003-0230
2003-07-25 04:00:00
cert
cert
Microsoft SQL Server contains flaw in checking method for the named pipe
2003-07-24 00:00:00
nvd
nvd
CVE-2003-0230
2003-08-27 04:00:00
nessus
nessus
MS03-031: Cumulative Patch for MS SQL Server (815495)
2003-07-24 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.6%
Related for CVE-2003-0230