CVE-2003-0496
Microsoft SQL Server <Windows 2000 SP4 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0496. PoCs published by Maceo.
AI-analyzed exploit summary This exploit leverages CVE-2003-0496, a named pipe impersonation vulnerability in Microsoft Windows, to escalate privileges to SYSTEM. It creates a named pipe, waits for a connection, impersonates the client, duplicates the token, and spawns a process with elevated privileges.
Description
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
Exploits (2)
This exploit leverages CVE-2003-0496, a named pipe impersonation vulnerability in Microsoft Windows, to escalate privileges to SYSTEM. It creates a named pipe, waits for a connection, impersonates the client, duplicates the token, and spawns a process with elevated privileges.
This exploit leverages a named pipe impersonation vulnerability (CVE-2003-0496) in Microsoft Windows to escalate privileges to SYSTEM. It creates a named pipe, waits for a connection, and impersonates the client (typically a high-privilege process like SCM) to execute arbitrary commands.