CVE-2003-0231 Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
MediumCVSS 5.0
EPSS 36.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft data engine | = 1.0 | No fix listed |
| Microsoft sql server | = 7.0 | No fix listed |
| Microsoft sql server | = 7.0-sp1 | No fix listed |
| Microsoft sql server | = 7.0-sp2 | No fix listed |
| Microsoft sql server | = 7.0-sp3 | No fix listed |
| Microsoft sql server | = 7.0-sp4 | No fix listed |
| Microsoft sql server | = 2000 | No fix listed |
| Microsoft sql server | = 2000-sp1 | No fix listed |
| Microsoft sql server | = 2000-sp2 | No fix listed |
| Microsoft sql server | = 2000-sp3 | No fix listed |
| Microsoft sql server | = 2000-sp3a | No fix listed |
References
- A072303-2 vendor-advisory
- VU#918652 third-party-advisory us-government-resource
- MS03-031 vendor-advisory
- oval:org.mitre.oval:def:299 signature vdb-entry