GCVE - cpe:2.3:a:microsoft:sql_server:2000:sp3a:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sql_server:2000:sp3a:*:*:*:*:*:*

part: a version: 2000 update: sp3a

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Sql Server (`fd983e7c-5172-5f6b-b132-c409278d1646`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4015`	not_vulnerable	2026-06-08 05:02:15.570957	Details available Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry. Published: 2012-09-25T10:00:00.000Z Updated: 2024-09-17T02:57:56.015Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN56373673/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2012-000087	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0232`	vulnerable	2026-06-08 04:47:21.086824	Details available Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow. Published: 2003-07-25T04:00:00.000Z Updated: 2024-08-08T01:43:36.067Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031 http://www.kb.cert.org/vuls/id/584868 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A303 http://www.atstake.com/research/advisories/2003/a072303-3.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0231`	vulnerable	2026-06-08 04:47:21.086269	Details available Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe. Published: 2003-07-25T04:00:00.000Z Updated: 2024-08-08T01:43:36.094Z Open on db.gcve.eu Reference links http://www.atstake.com/research/advisories/2003/a072303-2.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A299 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031 http://www.kb.cert.org/vuls/id/918652	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0230`	vulnerable	2026-06-08 04:47:21.085605	Details available Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability. Published: 2003-07-25T04:00:00.000Z Updated: 2024-08-08T01:43:36.098Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A235 http://www.kb.cert.org/vuls/id/556356	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.