CVE-2003-0496

Published: Aug 18, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.

Affected (8)

Products: Microsoft: Windows 2000, Windows 2000 Terminal Services

Microsoft

2 products

Windows 2000

Windows 2000 Terminal Services

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions