CVE-2001-0344

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jul 21, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-03455.0Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creat CVE-2001-03465.0Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions an CVE-2001-03477.5Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user acc CVE-2001-03485.0Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspa CVE-2001-03497.2Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users CVE-2001-03504.6Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users CVE-2001-03512.1Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session a CVE-2001-03525.0SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it fr CVE-2001-035310.0Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via CVE-2001-03545.0TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on CVE-2001-03555.0Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies.CVE-2001-03577.5FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message param