4.6

CVE-2002-0643

EPSS 0.82%
Published 23.07.2002 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Data Engine Version1.0

Microsoft ≫ Sql Server Version7.0

Microsoft ≫ Sql Server Version7.0 Updatesp1

Microsoft ≫ Sql Server Version7.0 Updatesp2

Microsoft ≫ Sql Server Version7.0 Updatesp3

Microsoft ≫ Sql Server Version2000

Microsoft ≫ Sql Server Version2000 Updatesp1

Microsoft ≫ Sql Server Version2000 Updatesp2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.82%	0.721

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://marc.info/?l=bugtraq&m=102640092826731&w=2

http://marc.info/?l=vuln-dev&m=102640394131103&w=2

http://www.kb.cert.org/vuls/id/338195

US Government Resource

http://www.securityfocus.com/bid/5203

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-035

https://nvd.nist.gov/vuln/detail/CVE-2002-0643

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0643

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0643

EUVD