CVE-2003-0030

CRITICAL 10.0CVE-2003-0030 · Published 18/03/2003 · updated 16/06/2026

In short

CVE-2003-0030 is a CRITICAL (CVSS 10.0) vulnerability affecting secure.data (protegrity).
Chance of exploitation in the next 30 days (EPSS): 4.8%, higher than 91.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
secure.data protegrity	`= 2.2.3.7= 2.2.3.8`	No fix yet

Description

Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures (1) xp_pty_checkusers, (2) xp_pty_insert, or (3) xp_pty_select.

References

marc.info
secunia.com/advisories/8294
kb.cert.org/vuls/id/247545 · Patch
securityfocus.com/bid/7083 · Vendor Advisory
securityfocus.com/bid/7084 · Vendor Advisory
securityfocus.com/bid/7085 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free