CVE-2003-0496

Опубликовано: 18 авг. 2003

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=105820282607865&w=2
http://marc.info/?l=bugtraq&m=105830986720243&w=2
http://www.atstake.com/research/advisories/2003/a070803-1.txt
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=105820282607865&w=2
http://marc.info/?l=bugtraq&m=105830986720243&w=2
http://www.atstake.com/research/advisories/2003/a070803-1.txt
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02182

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4mxw-wgpc-xxg2

github

почти 4 года назад