First published: Fri Jul 25 2003(Updated: )
Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft SQL Server Data Engine (MSDE) | =1.0 | |
Microsoft SQL Server | =7.0 | |
Microsoft SQL Server | =7.0-sp1 | |
Microsoft SQL Server | =7.0-sp2 | |
Microsoft SQL Server | =7.0-sp3 | |
Microsoft SQL Server | =7.0-sp4 | |
Microsoft SQL Server | =2000 | |
Microsoft SQL Server | =2000 | |
Microsoft SQL Server | =2000-sp1 | |
Microsoft SQL Server | =2000-sp2 | |
Microsoft SQL Server | =2000-sp3 | |
Microsoft SQL Server | =2000-sp3a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-0231 is classified as a denial of service vulnerability that can lead to crashes or hangs in Microsoft SQL Server.
To mitigate CVE-2003-0231, you should apply the latest service packs or patches provided by Microsoft for your affected SQL Server version.
CVE-2003-0231 affects Microsoft SQL Server 7.0 and 2000, including various service pack versions.
Yes, CVE-2003-0231 can be exploited by both local and remote authenticated users to cause a denial of service.
CVE-2003-0231 is primarily associated with a denial of service attack that involves sending a long request to a named pipe.