CVE-2003-0231: Medium severity Microsoft Data Engine vulnerability

Published Jul 25, 2003
·
Updated

Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.

Affected Software

12 affected components
Microsoft Data Engine=1.0
Microsoft SQL Server=7.0
Microsoft SQL Server=7.0-sp1
Microsoft SQL Server=7.0-sp2
Microsoft SQL Server=7.0-sp3
Microsoft SQL Server=7.0-sp4
Microsoft SQL Server=2000
Microsoft SQL Server=2000
Microsoft SQL Server=2000-sp1
Microsoft SQL Server=2000-sp2
Microsoft SQL Server=2000-sp3
Microsoft SQL Server=2000-sp3a

Event History

Jul 25, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 27, 2003
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2003-0231?

CVE-2003-0231 is classified as a denial of service vulnerability that can lead to crashes or hangs in Microsoft SQL Server.

2

How do I fix CVE-2003-0231?

To mitigate CVE-2003-0231, you should apply the latest service packs or patches provided by Microsoft for your affected SQL Server version.

3

What versions of Microsoft SQL Server are affected by CVE-2003-0231?

CVE-2003-0231 affects Microsoft SQL Server 7.0 and 2000, including various service pack versions.

4

Can CVE-2003-0231 be exploited remotely?

Yes, CVE-2003-0231 can be exploited by both local and remote authenticated users to cause a denial of service.

5

What type of attack is associated with CVE-2003-0231?

CVE-2003-0231 is primarily associated with a denial of service attack that involves sending a long request to a named pipe.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203