CVE-2003-0496

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure…

published July 10, 2003

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04568 · 91.5th percentile
Published
2003-07-10T04:00Z
EPSS history
Timeline
  • 10 JUL 04:00Z
    Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure…
    cvelistv5