CVE-2003-0496

CVE-2003-0496 describes a local privilege escalation vulnerability in Microsoft SQL Server on Windows 2000 SP4 and earlier. An attacker can exploit this by calling the xp_fileexist extended stored procedure with a named pipe as an argument, gaining privileges as the SQL Server user. This vulnerability has a CVSS score of 7.2, indicating high severity due to complete compromise of confidentiality, integrity, and availability from a local attack. While not on the KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.