Lucene search
HistoryMar 22, 2000 - 5:00 a.m.
CVE-2000-0199
microsoft
sql server 7.0
enterprise manager
weak encryption
cve-2000-0199
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the “Always prompt for login name and password” option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
Affected configurations
Node
microsoftsql_serverMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:sql_server | microsoft sql server | eq | 7.0 |
References
Related
nvd
nvd
CVE-2000-0199
2000-03-14 05:00:00
nessus
nessus
Microsoft SQL Server < 7 Local Privilege Escalation
2003-10-08 00:00:00
cvelist
cvelist
CVE-2000-0199
2000-03-22 05:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%
Related for CVE-2000-0199