10

CVE-2000-1209

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Compaq ≫ Insight Manager Version7.0
Compaq ≫ Insight Manager Version7.0 Updatesp1
Compaq ≫ Insight Manager Xe Version1.1
Compaq ≫ Insight Manager Xe Version1.21
Compaq ≫ Insight Manager Xe Version2.1
Compaq ≫ Insight Manager Xe Version2.1b
Compaq ≫ Insight Manager Xe Version2.1c
Compaq ≫ Insight Manager Xe Version2.2
Microsoft ≫ Data Engine Version1.0
Microsoft ≫ Msde Version2000
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 88.44% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.kb.cert.org/vuls/id/635463
Patch
Third Party Advisory
US Government Resource