CVE-2001-0344

HIGH 7.2CVE-2001-0344 · Published 21/07/2001 · updated 16/06/2026

In short

CVE-2001-0344 is a HIGH (CVSS 7.2) vulnerability affecting sql server (microsoft).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sql server microsoft	`= 2000= 7.0`	No fix yet

Description

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.

References

ciac.org/ciac/bulletins/l-095.shtml
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032
exchange.xforce.ibmcloud.com/vulnerabilities/6684
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71

More vulnerabilities in sql server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free