CVE-2003-0496

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=105820282607865&w=2
http://marc.info/?l=bugtraq&m=105830986720243&w=2
http://www.atstake.com/research/advisories/2003/a070803-1.txtExploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=105820282607865&w=2
http://marc.info/?l=bugtraq&m=105830986720243&w=2
http://www.atstake.com/research/advisories/2003/a070803-1.txtExploit, Patch, Vendor Advisory

Timeline

Published: Aug 18, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-04977.2Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying ca CVE-2003-04987.2Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by add CVE-2003-04993.6Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perf CVE-2003-050010.0SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers t CVE-2003-05012.1The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a CVE-2003-050210.0Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequ CVE-2003-05037.5Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service CVE-2003-05044.3Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HT CVE-2003-05055.0Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (CVE-2003-05065.0Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malfo CVE-2003-05077.5Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and CVE-2003-05087.5Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute ar