Vulnerabilities > CVE-2001-0344 - Unspecified vulnerability in Microsoft SQL Server 2000/7.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
microsoft
NVD
Published: 2001-07-21
Updated: 2018-10-12

Summary

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

Oval

accepted2005-04-27T12:07:00.000-04:00
classvulnerability
contributors
  • nameYi-Fang Koh
    organizationThe MITRE Corporation
  • nameJonathan Baker
    organizationThe MITRE Corporation
  • nameJonathan Baker
    organizationThe MITRE Corporation
descriptionAn SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
familywindows
idoval:org.mitre.oval:def:71
statusaccepted
submitted2003-06-24T12:00:00.000-04:00
titlePrivilege Escalation Using Cached Admin Connection
version3

References