CVE-2003-0232

Published: Aug 27, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.

Affected (12)

Products: Microsoft: Data Engine, Sql Server

Microsoft

2 products

Data Engine

Sql Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Microsoft Data Engine	Version 1.0
Microsoft Sql Server	Version 2000
Microsoft Sql Server	Version 2000
Microsoft Sql Server	Version 2000 sp1
Microsoft Sql Server	Version 2000 sp2
Microsoft Sql Server	Version 2000 sp3
Microsoft Sql Server	Version 2000 sp3a
Microsoft Sql Server	Version 7.0
Microsoft Sql Server	Version 7.0 sp1
Microsoft Sql Server	Version 7.0 sp2
Microsoft Sql Server	Version 7.0 sp3
Microsoft Sql Server	Version 7.0 sp4