7.5

CVE-2002-1872

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Sql Server Version 6.0
Microsoft ≫ Sql Server Version 6.5
Microsoft ≫ Sql Server Version 7.0
Microsoft ≫ Sql Server Version 7.0 Update sp1
Microsoft ≫ Sql Server Version 7.0 Update sp2
Microsoft ≫ Sql Server Version 7.0 Update sp3
Microsoft ≫ Sql Server Version 7.0 Update sp4
Microsoft ≫ Sql Server Version 2000
Microsoft ≫ Sql Server Version 2000 Update sp1
Microsoft ≫ Sql Server Version 2000 Update sp2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.95% 0.923
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

http://online.securityfocus.com/archive/1/298361
Third Party Advisory
Vendor Advisory
Broken Link
VDB Entry
http://www.iss.net/security_center/static/10542.php
Broken Link
http://www.nextgenss.com/papers/tp-SQL2000.pdf
Broken Link
http://www.securityfocus.com/bid/6097
Third Party Advisory
Broken Link
VDB Entry