exploits , vulnerabilities , articles , Microsoft SQL Server / MSDE Named Pipes Privilege Escalation Vulnerability

Title	Microsoft SQL Server / MSDE Named Pipes Privilege Escalation Vulnerability
Published	2003-07-23-12:00AM
Updated	2003-07-25-02:11PM
Class	Access Validation Error
CVE	CAN-2003-0230
Remote	No
Local	Yes
Credit	This vulnerability was announced by the vendor in a security advisory.
Vulnerable	Microsoft SQL Server 2000 Desktop Engine Akiva WebBoard 6.1 Microsoft Access 2000 Microsoft Application Center 2000 Microsoft BizTalk Server 2000 Developer Edition Microsoft BizTalk Server 2000 Enterprise Edition Microsoft BizTalk Server 2000 Standard Edition Microsoft BizTalk Server 2002 Developer Edition Microsoft BizTalk Server 2002 Enterprise Edition Microsoft Office 2000 Microsoft Project Central Server Microsoft SharePoint Team Services from Microsoft Microsoft Visio 2000 Enterprise Edition Microsoft Visio Enterprise Network Tools Microsoft Visual FoxPro 6.0 Microsoft Visual Studio 6.0 Microsoft Visual Studio .NET Academic Edition Microsoft Visual Studio .NET Enterprise Architect Edition Microsoft Visual Studio .NET Enterprise Developer Edition Microsoft Visual Studio .NET Professional Edition SmartMax Software MailMax 5.0 Veritas Software Backup Exec for Windows Servers 9.0 Microsoft SQL Server 2000 SP3a Microsoft SQL Server 2000 SP3 Microsoft SQL Server 2000 SP2 Microsoft SQL Server 2000 SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Microsoft SQL Server 2000 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Microsoft SQL Server 7.0 SP4 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 SP3 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 SP2 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 SP1 Microsoft SQL Server 7.0 Microsoft SQL Server 7.0 Microsoft BackOffice 4.5 Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 SP1 Microsoft Windows NT 4.0 SP2 Microsoft Windows NT 4.0 SP3 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Microsoft Data Engine 1.0 Affymetrix Microarray Suite Software 5.0 Affymetrix Microarray Suite Software 5.0.1 Altiris Deployment Server 5.0.1 Altiris Deployment Server 5.5 BlackBerry Enterprise Server 2.0 .0.65 Centennial UK Ltd Centennial Discovery 4.4 Compaq Insight Manager 7.0 Compaq Insight Manager 7.0 SP1 Gerber Technology WebPDM 3.9 McAfee ePolicy Orchestrator 1.0 McAfee ePolicy Orchestrator 1.1 McAfee ePolicy Orchestrator 2.0 McAfee ePolicy Orchestrator 2.5 McAfee ePolicy Orchestrator 2.5 SP1 Microsoft Access 2000 Microsoft Project Central Server Microsoft SharePoint Team Services from Microsoft Microsoft Visual Studio 6.0 PowerQuest ControlCenter ST 2.0 PPM 2000 Incident Reporting and Investigation Management 5.1 Trend Micro Control Manager 2.5 Trend Micro Damage Cleanup Server 1.0 Vital Processing Services LLC POSpartner 2000 4.1.11 Vital Processing Services LLC POSpartner 2000 5.0.13 Websense Reporter 6.3.1
Not Vulnerable
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 mvnForum Cross Site Scripting Vulnerability
2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-04 Jbook SQL Injection Vulnerability
2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
2008-12-04 Netrw Vim Script Information Disclosure Vulnerability