CVE-2003-0230 Race condition in n/a
Local attackers can hijack named pipes during authentication to gain elevated privileges on Microsoft SQL Server instances.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2003-0230?
CVE-2003-0230 is a high-severity vulnerability in Microsoft Sql Server, published on 25 Jul 2003. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
Weakness: CWE-264
Which versions are affected by CVE-2003-0230?
It affects 2 products.
Products include Microsoft Data Engine, Microsoft Sql Server.
How do I fix CVE-2003-0230?
No fix has been published for CVE-2003-0230 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-0230 being exploited?
There is no known exploitation of CVE-2003-0230 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Sql Server
Sources
Also known as GHSA-q8hv-377q-25pw.