CVE-2001-0344

Published: Jul 21, 2001Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.

Affected (2)

Products: Microsoft: Sql Server

Microsoft

1 product

Sql Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sql Server	Version 2000 gold
Microsoft Sql Server	Version 7.0

References (8)

http://www.ciac.org/ciac/bulletins/l-095.shtml

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/6684

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/l-095.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/6684

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.