Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Windows有名管道文件名本地权限提升漏洞
Vulnerability Description
Microsoft Windows是微软开发的视窗操作系统。 通过指定文件代替有名管道名作为SQL Server xp_fileexist存储扩展的参数，可导致以用户帐户SQL权限或者其他服务进程权限运行此文件，可能导致权限提升。 漏洞是由于CreateFile系统调用的操作和可劫持冒充Windows有名管道。API调用CreateFile用来打开或建立文件，有名管道，Mail slot等，不过没有任何机制来限制这个API调用打开何种资源。WIN32中多数服务运行在系统帐户下并以一定方式处理文件，如果可以
CVSS Information
N/A
Vulnerability Type
N/A