CVE-2003-0496
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL...
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
Exploit likelihood
What each source reports
NVD Score used
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
- Record
CVE-2003-0496- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
- Record
CVE-2003-0496- Updated
- 2026-11-02
EUVDEUVD-2003-0490 No score
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
- Record
EUVD-2003-0490- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4mxw-wgpc-xxg2 No score
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL...
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
- Record
GHSA-4mxw-wgpc-xxg2- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation (1) | 2003-07-08 |
| Exploit-DB | Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation (2) | 2003-07-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0496 is a high vulnerability (CVSS 7.2) in Microsoft Windows 2000, published July 10, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.57%, the 91st percentile. No source names a fixed version.