MS03-031: Cumulative Patch for MS SQL Server (815495)

Medium Nessus Plugin ID 11804


Arbitrary code can be executed on the remote host through the SQL service.


The remote Microsoft SQL server is vulnerable to several flaws :

- Named pipe hijacking
- Named Pipe Denial of Service
- SQL server buffer overrun

These flaws could allow a user to gain elevated privileges on this host.


Microsoft has released a set of patches for MSSQL 7 and 2000.

See Also

Plugin Details

Severity: Medium

ID: 11804

File Name: smb_nt_ms03-031.nasl

Version: $Revision: 1.36 $

Type: local

Agent: windows

Published: 2003/07/24

Modified: 2017/05/25

Dependencies: 13855, 57033

Risk Information

Risk Factor: Medium


Base Score: 4.6

Temporal Score: 3.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C


Base Score: 5.3

Temporal Score: 4.9

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:data_engine, cpe:/a:microsoft:sql_server

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2003/07/23

Vulnerability Publication Date: 2003/07/03

Reference Information

CVE: CVE-2003-0230, CVE-2003-0231, CVE-2003-0232

BID: 8274, 8275, 8276

OSVDB: 2299, 10123, 10125

MSFT: MS03-031

CERT: 918652, 584868, 556356

MSKB: 815495

CWE: 264