CVE-2003-0496

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-07-10 · updated 2026-06-16

Description

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2000 Terminal Services: all versions

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html
http://marc.info/?l=bugtraq&m=105820282607865&w=2
http://marc.info/?l=bugtraq&m=105830986720243&w=2
http://www.atstake.com/research/advisories/2003/a070803-1.txt
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html
http://marc.info/?l=bugtraq&m=105820282607865&w=2
http://marc.info/?l=bugtraq&m=105830986720243&w=2
http://www.atstake.com/research/advisories/2003/a070803-1.txt

Get alerted when CVE-2003-0496 or the next vulnerability affects your stack