New Search

Privilege Escalation Using Cached Admin Connection

oval:org.mitre.oval:def:71

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows 2000
Class:
vulnerability
Reference(s):
  • CVE-2001-0344
Product(s):
  • Microsoft SQL Server 2000