Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.01396
Percentile: 0.79547

CVSS Scoring

Affected Products

• cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:2000:*:desktop_engine:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:2000:sp3:*:*:*:*:*:*
• cpe:2.3:a:microsoft:sql_server:2000:sp3a:*:*:*:*:*:*

← Back to Home