7.2
CVE-2003-0496
- EPSS 4.86%
- Veröffentlicht 18.08.2003 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:02:18
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMicrosoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 2000 Updatesp1
Microsoft ≫ Windows 2000 Updatesp2
Microsoft ≫ Windows 2000 Updatesp3
Microsoft ≫ Windows 2000 Terminal Services Updatesp1
Microsoft ≫ Windows 2000 Terminal Services Updatesp2
Microsoft ≫ Windows 2000 Terminal Services Updatesp3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.86% | 0.909 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html
http://marc.info/?l=bugtraq&m=105820282607865&w=2
http://marc.info/?l=bugtraq&m=105830986720243&w=2
http://www.atstake.com/research/advisories/2003/a070803-1.txt