CVE-2001-0344
UnknownEPSS 1.92%
Last modified
CVE-2001-0344 is a vulnerability of currently unknown severity. An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.. EPSS estimates a 1.92% chance of exploitation in the next 30 days.
Description
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Sql Server | 7.0 | — |
| Microsoft | Sql Server | 2000 | Gold |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2001-0344?
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
How severe is CVE-2001-0344?
Severity scoring for CVE-2001-0344 is pending analysis. The EPSS model estimates a 1.92% probability of exploitation in the next 30 days.
How do I fix CVE-2001-0344?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2001
- CVE-2001-0336The Microsoft MS00-060 patch for IIS 5.0 and earlier introdu…
- CVE-2001-0337The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and …
- CVE-2001-0338Internet Explorer 5.5 and earlier does not properly validate…
- CVE-2001-0339Internet Explorer 5.5 and earlier allows remote attackers to…
- CVE-2001-0340An interaction between the Outlook Web Access (OWA) service …
- CVE-2001-0341Buffer overflow in Microsoft Visual Studio RAD Support sub-c…
- CVE-2001-0345Microsoft Windows 2000 telnet service allows attackers to pr…
- CVE-2001-0346Handle leak in Microsoft Windows 2000 telnet service allows …
- CVE-2001-0347Information disclosure vulnerability in Microsoft Windows 20…
- CVE-2001-0348Microsoft Windows 2000 telnet service allows attackers to ca…
- CVE-2001-0349Microsoft Windows 2000 telnet service creates named pipes wi…
- CVE-2001-0350Microsoft Windows 2000 telnet service creates named pipes wi…
Are you affected by CVE-2001-0344?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST