4.6

CVE-2002-0643

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Data Engine Version1.0
Microsoft ≫ Sql Server Version7.0
Microsoft ≫ Sql Server Version7.0 Updatesp1
Microsoft ≫ Sql Server Version7.0 Updatesp2
Microsoft ≫ Sql Server Version7.0 Updatesp3
Microsoft ≫ Sql Server Version2000
Microsoft ≫ Sql Server Version2000 Updatesp1
Microsoft ≫ Sql Server Version2000 Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.82% 0.721
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P