low2.1Public exploit code
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft SQL Server - Payload Execution (Metasploit)2010-12-21 · remote · windows · Verified
- Microsoft SQL Server - Payload Execution (via SQL Injection) (Metasploit)2011-02-08 · remote · windows · Verified
Impact
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sql Server | Version 7.0 |
References
- NVD record
- CVE.org record
- http://www.microsoft.com/technet/support/kb.asp?ID=263968
- http://www.securityfocus.com/bid/1281
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-035
- http://www.microsoft.com/technet/support/kb.asp?ID=263968
- http://www.securityfocus.com/bid/1281
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-035