CVE-2003-0231
Current Description
Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
Basic Data
| Published | August 27, 2003 |
|---|
| Last Modified | October 12, 2018 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | NVD-CWE-Other |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:N/AC:L/Au:N/C:N/I:N/A:P |
|---|
| CVSS 2 - Access Vector | NETWORK |
|---|
| CVSS 2 - Access Complexity | LOW |
|---|
| CVSS 2 - Authentication | NONE |
|---|
| CVSS 2 - Confidentiality Impact | NONE |
|---|
| CVSS 2 - Availability Impact | PARTIAL |
|---|
| CVSS 2 - Base Score | 5.0 |
|---|
| Severity | MEDIUM |
|---|
| Exploitability Score | 10.0 |
|---|
| Impact Score | 2.9 |
|---|
| Obtain All Privilege | false |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | false |
|---|
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
| Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
|---|
| 2.3 | Application | Microsoft | Data Engine | 1.0 | * | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 7.0 | * | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 7.0 | sp1 | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 7.0 | sp2 | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 7.0 | sp3 | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 7.0 | sp4 | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 2000 | * | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 2000 | * | desktop_engine | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 2000 | sp1 | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 2000 | sp2 | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 2000 | sp3 | * | * | * | * | * | * | | | | |
| 2.3 | Application | Microsoft | Sql Server | 2000 | sp3a | * | * | * | * | * | * | | | | |
Vulnerable Software List
References
| Name | Source | URL | Tags |
|---|
| A072303-2 | http://www.atstake.com/research/advisories/2003/a072303-2.txt | ATSTAKE | |
| VU#918652 | http://www.kb.cert.org/vuls/id/918652 | CERT-VN | US Government Resource |
| MS03-031 | https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031 | MS | |
| oval:org.mitre.oval:def:299 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A299 | OVAL | |
Follow @discotekdotca