OVAL Repository - View Definition: oval:org.mitre.oval:def:235

OVAL Repository > View Definition

View Definition

NEW SEARCH : BACK

Definition Id: oval:org.mitre.oval:def:235		Version: 4 Last Modified: 2007-01-22
Title:	SQL Server Named Pipe Hijacking
Description:	Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
Family:	windows	Class:	vulnerability
Status:	ACCEPTED	Reference(s):	CVE-2003-0230
Platform(s):	Microsoft Windows 2000	Product(s):	SQL Server 2000
Definition Synopsis:
SQL Server 2000 is installed AND File console.exe version3 is less than 2000.80.818.0 AND File dbmslpcn.dll version3 is less than 2000.80.818.0 AND File sqlmap70.dll version3 is less than 2000.80.811.0 AND File sqlrepss.dll version3 is less than 2000.80.765.0 AND the version of sqlservr.exe is less than 2000.80.818.0 AND the version of ssmslpcn.dll is less than 2000.80.818.0 AND the version of ssnetlib.dll is less than 2000.80.818.0 AND the version of ssnmpn70.dll is less than 2000.80.818.0 AND the version of ums.dll is less than 2000.80.816.0 AND the version of odsole70.dll is less than 2000.80.800.0 AND the version of xpweb70.dll is less than 2000.80.778.0 AND File msgprox.dll version3 is less than 2000.80.765.0 AND the version of replprov.dll is less than 2000.80.798.0 AND File replrec.dll version3 is less than 2000.80.765.0 AND File sqlvdi.dll version3 is less than 2000.80.765.0

NEW SEARCH : BACK

OVAL Repository

About the Repository

OVAL Repository Forum

Author’s Resources

Items of Interest