Buffer Overflow Vulnerability in Microsoft SQL Server and MSDE

CVE-2003-0232

Summary

Microsoft SQL Server 7, 2000, and MSDE have a vulnerability that allows local users to exploit the Local Procedure Calls (LPC) port to execute arbitrary code. This security issue arises from insufficient validation of input during the handling of requests through LPC, which can lead to a buffer overflow situation. Successfully exploiting this vulnerability might allow local users to execute unauthorized commands or gain elevated privileges on the affected server.

References