CVE-2000-0603

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/1444Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-048
https://exchange.xforce.ibmcloud.com/vulnerabilities/4921
http://www.securityfocus.com/bid/1444Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-048
https://exchange.xforce.ibmcloud.com/vulnerabilities/4921

Timeline

Published: Jul 7, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06044.6gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp.CVE-2000-06052.1Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access contro CVE-2000-06067.2Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupM CVE-2000-06077.2Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file co CVE-2000-06085.0NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost).CVE-2000-06095.0NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter.CVE-2000-06105.0NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a usernam CVE-2000-06115.0The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and c CVE-2000-06125.0Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cach CVE-2000-06135.0Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to CVE-2000-061410.0Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify abs CVE-2000-06152.1LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.