Lucene search
HistoryOct 13, 2000 - 4:00 a.m.
CVE-2000-0654
microsoft
enterprise manager
database
passwords
data transformation service
vulnerability
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.3%
Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the “DTS Password” vulnerability.
Affected configurations
Node
microsoftsql_serverMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:sql_server | microsoft sql server | eq | 7.0 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.3%
Related for CVE-2000-0654