CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
25.8%
Microsoft SQL server versions 7.0 and 2000, as well as MSDE 1.0, may leave installation and log files on the server after the installation process is complete. These files may contain senstitive information such as passwords [used during the install]. Users with authenticated access to the server may be able to view this information and gain elevated privileges.
Microsoft SQL server versions 7.0 and 2000, as well as MSDE 1.0, may leave installation and log files on the server that contain passwords, after the installation process is complete. Users that can authenticate to the server, or read files stored locally on the server may be able to view this information and gain elevated privileges.
Note that while Microsoft SQL server versions 7.0 with SP 4 installed, and 2000 with SP 1 and 2 installed, encrypt the passwords prior to storing them in the temporary files, Microsoft’s security bulletin (MS02-035) states that the encryption used is “fairly weak” and could be subject to “password cracking attacks.”
Local authenticated users of the server may be able to view sensitive information such as passwords and gain elevated privileges.
Use the “KillPwd” utility provided in Microsoft’s security bulletin MS02-035 and apply the relevent patches.
Delete the installation log files and the “setup.iss” file after installation.
338195
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Additional information available
__ Sort by: Status Alphabetical
Expand all
Javascript is disabled. Click here to view vendors.
Updated: July 26, 2002
Affected
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23338195 Feedback>).
Group | Score | Vector |
---|---|---|
Base | ||
Temporal | ||
Environmental |
This vulnerability was reported to Microsoft by Cesar Cerrudo.
This document was written by Jason A Rafail.
CVE IDs: | CVE-2002-0643 |
---|---|
Severity Metric: | 6.30 Date Public: |
msdn.microsoft.com/library/default.asp?url=/library/en-us/dnmsde/html/msdeforvs.asp
msdn.microsoft.com/library/default.asp?URL=/library/techart/acaccessprojects.htm
www.appsecinc.com/resources/alerts/mssql/02-0009.html
www.microsoft.com/technet/security/bulletin/MS00-035.asp
www.microsoft.com/technet/security/bulletin/MS02-035.asp
www.securityfocus.com/bid/5203