CVE-2001-0344: High severity Microsoft SQL Server vulnerability

Published Jul 21, 2001

Updated

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.

Affected Software

2 affected components

Microsoft SQL Server=7.0

Microsoft SQL Server=2000-gold

Event History

Jul 21, 2001

CVE Published

04:00 AM

Sep 18, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0344?

CVE-2001-0344 is considered a moderate severity vulnerability that allows privilege escalation due to improper handling of cached connections.

How do I fix CVE-2001-0344?

To fix CVE-2001-0344, it's recommended to apply the latest service pack or update for Microsoft SQL Server 7.0 and 2000.

Who is affected by CVE-2001-0344?

CVE-2001-0344 affects users of Microsoft SQL Server 7.0 and SQL Server 2000 Gold operating in Mixed Mode.

What types of attacks can exploit CVE-2001-0344?

An attacker can exploit CVE-2001-0344 by reusing a cached connection of the sa administrator account to gain elevated privileges.

Is CVE-2001-0344 still a concern in 2023?

While CVE-2001-0344 is an older vulnerability, systems still running affected versions of SQL Server may still be at risk if not properly updated.