Total vulnerabilities in the database
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_2000_terminal_services | - | - |
| microsoft / windows_2000 | - | - |