---
id: 8093
title: "Exploiting SQL Server Global Temporary Table Race Conditions"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/adversary-simulation/exploiting-sql-server-global-temporary-table-race-conditions/"
published_at: "2019-11-11T00:00:00Z"
tags: ["privilege-escalation", "pentest", "database", "race-condition", "sql-server"]
phying_url: "https://phying.com/item/8093"
lang: en
---

# Exploiting SQL Server Global Temporary Table Race Conditions

## Summary

Global temporary tables in SQL Server are readable and writable by any user; NetSPI shows how least-privileged users can exploit race conditions to access data, including a TSQL Agent job escalation.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2019-11-11T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/adversary-simulation/exploiting-sql-server-global-temporary-table-race-conditions/
- **Phying News:** https://phying.com/item/8093