CVE

Id
7323  
CVE No.
CVE-2003-0496  
Status
Candidate  
Description
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.  
Phase
Assigned (20030630)  
Votes
None (candidate not yet proposed)  
Comments