Description
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
References
- MS01-032 vendor-advisory
- mssql-cached-connection-access(6684) vdb-entry
- oval:org.mitre.oval:def:71 vdb-entry signature
- L-095 third-party-advisory government-resource