CVE-2000-0402
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/05/2000
Last modified:
12/10/2018
Description
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
Impact
Base Score 2.0
2.10
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page