NetSight
IP …
critical10.0Public exploit code

CVE-2000-1209

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including thir…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

Affected products

VendorProductAffected versions
CompaqInsight Manager
Version 7.0
CompaqInsight Manager Xe
Versions 1.1, 1.21, 2.1, 2.1b, 2.1c, 2.2
MicrosoftData Engine
Version 1.0
MicrosoftMsde
Version 2000

References