CVE-2003-0232

Description

Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.

Affected products

• microsoft / data_engine1.0 – 1.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server7.0 – 7.0
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000
• microsoft / sql_server2000 – 2000

Exploits & proofs of concept

• exploit-dbMicrosoft Windows SQL Server - Remote Denial of Service (MS03-031)by refdom

References

• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031
• MISChttp://www.kb.cert.org/vuls/id/584868
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A303
• VENDOR_ADVISORYhttp://www.atstake.com/research/advisories/2003/a072303-3.txt