« Volver al listado

CVE-2003-0230

Estado: ModificadaAlta (7.2)—

Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Microsoft — Data EngineMicrosoft — SQL Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-0230",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-08-27T04:00:00.000",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/556356",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A235",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/556356",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A235",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the \"Named Pipe Hijacking\" vulnerability."
    },
    {
      "lang": "es",
      "value": "Microsoft SQL Server 7, 2000, y MSDE permite a usuarios locales ganar privilegios secuestrando  una tubería con nombre (named pipe) de otro usuario, llamada vulnerabilidad de \"Secuestro de Tubería con Nombre\"."
    }
  ],
  "lastModified": "2026-06-16T22:01:47.720",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F455C373-A9F7-47F9-828E-DEE2C8CC6545"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2AB95D7-394E-423B-884C-87A9960682EE"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4355BA3D-B985-4DC7-AD9D-21B64652CC19"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D590A237-1587-4FF2-BEEA-F96B1C08F84C"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B004F338-1C8E-4283-8823-1A16A291FCBD"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54EB3111-B93A-4577-9592-0D13FE7FD2C4"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5D559EE-727C-405C-987C-247973A84D32"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2000:*:desktop_engine:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D96CDDDA-2ECE-4327-801C-735A98DD7D48"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BC2A389-68BF-45B1-833D-96B331844424"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2000:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E3ED68C-FBA1-45D8-8A26-BD327DDA2DA8"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2000:sp3a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "557136FE-E5D5-467E-96ED-4C45682DA767"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}