Lucene search

[email protected]CVE-2001-0344

HistoryJul 21, 2001 - 4:00 a.m.

CVE-2001-0344

2001-07-2104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

microsoft

sql server 2000

sql server 7.0

local privilege escalation

cve-2001-0344

nvd

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.1%

JSON

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.

CPENameOperatorVersion
microsoft:sql_servermicrosoft sql servereq7.0
microsoft:sql_servermicrosoft sql servereq2000

CPE	Name	Operator	Version
microsoft:sql_server	microsoft sql server	eq	7.0
microsoft:sql_server	microsoft sql server	eq	2000

References

www.ciac.org/ciac/bulletins/l-095.shtml

docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032

exchange.xforce.ibmcloud.com/vulnerabilities/6684

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.1%

JSON

Related for CVE-2001-0344

openvas1