Detections
Analytics

MS03-031: Cumulative Patch for MS SQL Server (815495)

medium Nessus Plugin ID 11804

Synopsis

Arbitrary code can be executed on the remote host through the SQL service.

Description

The remote Microsoft SQL server is vulnerable to several flaws :

 - Named pipe hijacking
 - Named Pipe Denial of Service
 - SQL server buffer overrun

These flaws could allow a user to gain elevated privileges on this host.

Solution

Microsoft has released a set of patches for MSSQL 7 and 2000.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2003/ms03-031

Plugin Details

Severity: Medium

ID: 11804

File Name: smb_nt_ms03-031.nasl

Version: 1.38

Type: local

Agent: windows

Published: 7/24/2003

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:sql_server, cpe:/o:microsoft:windows, cpe:/a:microsoft:data_engine

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/23/2003

Vulnerability Publication Date: 7/3/2003

Reference Information

CVE: CVE-2003-0230, CVE-2003-0231, CVE-2003-0232

BID: 8274, 8275, 8276

CWE: 264

CERT: 556356, 584868, 918652

MSFT: MS03-031

MSKB: 815495