CVE-2003-0232 Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
HighCVSS 7.2
EPSS 4.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft data engine | = 1.0 | No fix listed |
| Microsoft sql server | = 7.0 | No fix listed |
| Microsoft sql server | = 7.0-sp1 | No fix listed |
| Microsoft sql server | = 7.0-sp2 | No fix listed |
| Microsoft sql server | = 7.0-sp3 | No fix listed |
| Microsoft sql server | = 7.0-sp4 | No fix listed |
| Microsoft sql server | = 2000 | No fix listed |
| Microsoft sql server | = 2000-sp1 | No fix listed |
| Microsoft sql server | = 2000-sp2 | No fix listed |
| Microsoft sql server | = 2000-sp3 | No fix listed |
| Microsoft sql server | = 2000-sp3a | No fix listed |
References
- A072303-3 patch vendor-advisory
- VU#584868 third-party-advisory us-government-resource
- MS03-031 vendor-advisory
- oval:org.mitre.oval:def:303 signature vdb-entry