Detections
Analytics
MS03-031: Cumulative Patch for MS SQL Server (815495)
medium Nessus Plugin ID 11804
Synopsis
Arbitrary code can be executed on the remote host through the SQL service.Description
The remote Microsoft SQL server is vulnerable to several flaws :- Named pipe hijacking
- Named Pipe Denial of Service
- SQL server buffer overrun
These flaws could allow a user to gain elevated privileges on this host.
Solution
Microsoft has released a set of patches for MSSQL 7 and 2000.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2003/ms03-031
Plugin Details
Severity: Medium
ID: 11804
File Name: smb_nt_ms03-031.nasl
Version: 1.38
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 7/24/2003
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 3.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:data_engine, cpe:/a:microsoft:sql_server
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/23/2003
Vulnerability Publication Date: 7/3/2003