CVE-2003-0231

Description

Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.

Affected products

• microsoft / data_engine1.0 – 1.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000

Exploits & proofs of concept

• exploit-dbMicrosoft SQL Server 7.0/2000 / MSDE - Named Pipe Denial of Service (MS03-031)by refdom

References

• VENDOR_ADVISORYhttp://www.atstake.com/research/advisories/2003/a072303-2.txt
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A299
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031
• MISChttp://www.kb.cert.org/vuls/id/918652